Cookie Policy

Effective from: 7 June 2026 · Version 1.0

1. Introduction

This notice provides transparent and complete information, based on Regulation (EU) 2016/679 (GDPR), Article 5(3) of the ePrivacy Directive (2002/58/EC) and Section 155(4) of Hungarian Act C of 2003 on Electronic Communications (Eht.), about which cookies and similar technologies skillion.hu uses, for what purpose and for how long, and how you can control them.

A cookie is a small text file stored by your browser on your device that the website can read back on later visits. In line with EDPB Guidelines 2/2023, this notice also covers technologies treated the same way as cookies, in particular the browser localStorage.

2. The data controller

Company name: Skillion Korlátolt Felelősségű Társaság (in short: Skillion Kft.)

Registered seat: 4244 Újfehértó, Kossuth L. u. 69., Hungary

Company registration number: 15-09-093995 (registered at the Company Court of the Nyíregyháza Regional Court)

Tax number: 32898987-2-15

Email: support@skillion.hu, info@skillion.hu

Website: https://www.skillion.hu/

(Hereinafter: Skillion Kft. or Service Provider.)

3. Categories and legal bases

  • Strictly necessary: technologies essential for providing the service you requested (login, session, language preference, storing your cookie decision). Legal basis: GDPR Art. 6(1)(b) (performance of a contract); they fall under the ePrivacy Art. 5(3) exemption, so no consent is required, which is why they cannot be switched off.
  • Analytics: anonymous visitor statistics (Umami). Runs only with your prior, explicit consent (GDPR Art. 6(1)(a)). Off by default.
  • External media (YouTube): embedded videos load only after your explicit click, the click constitutes your consent (GDPR Art. 6(1)(a)).

We use no pre-ticked boxes, scrolling or continued browsing does not constitute consent, and non-essential technologies do not load at all until consent is given.

4. Strictly necessary cookies

The following first-party (skillion.hu) cookies are required for the basic operation of the website:

Cookie namePurposeDurationType
better-auth.session_tokenIdentifies your logged-in session30 daysCookie (HttpOnly)
better-auth.session_dataSession cache (fewer database lookups)5 minutesCookie (HttpOnly)
better-auth.account_dataAccount data cache5 minutesCookie (HttpOnly)
better-auth.dont_rememberMarks a non-persistent session when Remember me is offSessionCookie (HttpOnly)
better-auth.oauth_stateCSRF protection and PKCE during Google, Microsoft and Apple sign-inAbout 10 minutesCookie (HttpOnly)
NEXT_LOCALERemembers your chosen language365 daysCookie
skillion_cookie_consentStores your cookie decision (identifier, timestamp, categories, version)182 days (6 months)Cookie

In production (HTTPS) the better-auth cookies carry the __Secure- prefix (for example __Secure-better-auth.session_token) and are transmitted over encrypted connections only.

5. Functional local storage (localStorage)

The following data is kept in your browser localStorage (these are not cookies and are not transmitted to the server). They solely serve features you requested and are not used for analytics or marketing:

KeyPurposeDuration
webshop-cartPreserves your webshop cart contentsUntil deleted
generator-presets, generator-last-preset, generator-default-starsQuiz and content generation presets and settingsUntil deleted
skillion-quiz-export-configQuiz PDF export settingsUntil deleted
lastOpenedRemembers your last opened contentUntil deleted
editorShowMenuEditor sidebar stateUntil deleted
mindmap-positions-*Saves your mindmap layout per documentUntil deleted

6. Analytics (Umami): only with consent

For visitor statistics we use the open-source Umami software hosted on our own server (stats.skillion.hu). The Umami tracking script only loads if you consented to the Analytics category in the cookie banner.

  • Umami is cookieless: it sets no cookies and writes nothing to browser storage (localStorage, sessionStorage).
  • We do not store IP addresses: visitors are distinguished by an irreversible hash created with a daily-rotating key, from which the IP address cannot be recovered.
  • We only measure aggregate data: pages viewed, referrer, browser and device type, country.
  • The data stays on our own server, is not shared with any third party, and is not combined with any other processing.
  • We honor your browser Do Not Track signal even when you have consented.

7. Third parties: YouTube videos and payments

YouTube videos on the homepage and in study materials use a so-called two-click solution: by default only a preview image, served through our own server, is shown, and your browser does not communicate with any Google server. The video loads only after your click, from the privacy-enhanced youtube-nocookie.com domain.

When you start playback, YouTube (Google LLC) receives your IP address and details of the page you are visiting, and may set the following cookies and identifiers:

NamePurposeDurationType
VISITOR_INFO1_LIVEBandwidth estimation and playback trackingAbout 180 daysCookie (third party)
YSCSession-based interaction trackingSessionCookie (third party)
yt-remote-device-id and further yt-* keysPersistent device identifier and player preferencesPersistentlocalStorage (third party)

Data may also be transferred to the United States. Google LLC is a certified participant of the EU-US Data Privacy Framework, and the transfer is additionally safeguarded by Standard Contractual Clauses (SCCs). Google privacy policy: https://policies.google.com/privacy

For payments you are redirected to the checkout page of Polar Software Inc. (our merchant of record) running on its own domain; Polar sets no cookies on skillion.hu. The data you provide during payment (name, email, billing details, IP address) is processed by Polar as an independent controller; see its privacy policy: https://polar.sh/legal/privacy

8. Managing, logging and withdrawing consent

On your first visit a cookie banner appears in which the Accept and Reject buttons are equally prominent, and the Settings button lets you decide per category. We use no pre-ticked boxes, non-essential categories are off by default, and scrolling or continued browsing does not constitute consent.

Your decision, including a refusal, is remembered for 6 months, after which we ask again. If this notice changes materially, we ask for your consent again.

You can withdraw or change your consent at any time, just as easily as you gave it: via the Cookie Settings item in the profile menu, the Cookie Settings link in the footer, or the button at the top of this page. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To meet our accountability obligation (GDPR Art. 7(1)) we record a log entry for every decision, containing only the following: a random identifier (the UUID stored with your decision), your user ID if you are signed in, the content of the decision per category, the method of the decision, the version of this notice, the interface language and a timestamp. We log no IP address and no browser fingerprint. Log entries are retained for 5 years after the consent ends (the general limitation period under the Hungarian Civil Code).

9. Managing cookies in your browser

You can also delete or block cookies in your browser settings:

  • Chrome: Settings → Privacy and security → Third-party cookies
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Edge: Settings → Cookies and site permissions
  • Safari: Settings → Privacy → Cookies and website data

Please note that if you block strictly necessary cookies, some features of the website will not work properly (for example you will not be able to sign in, or your language preference will not be kept).

10. Your rights and remedies

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time. You can submit requests to support@skillion.hu; detailed information is available in our Privacy Policy (https://skillion.hu/privacy).

If you believe the processing is unlawful, you can lodge a complaint with the supervisory authority, in Hungary the National Authority for Data Protection and Freedom of Information (NAIH), or with the supervisory authority of your member state of residence, and you may also turn to the courts:

National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary

Postal address: 1363 Budapest, Pf. 9.

Email: ugyfelszolgalat@naih.hu

Phone: +36 (1) 391 1400

Website: https://www.naih.hu

11. Changes to this notice

We review and update this notice from time to time, for example when introducing a new service or technology. In case of a material change the cookie banner reappears and we ask for your consent again. Current version: 1.0 (7 June 2026).

© 2026 Skillion Kft. All rights reserved.skillion.hu