Legal
Website Cookie & Tracking Policy
- Effective
- September 7, 2026
- Version
- 1.0
1. What are Cookies and Tracking Technologies?
Cookies are small text files that websites place on your browser or device when you visit a webpage. Cookies allow websites to remember your device, preferences, and session state, and can provide analytical and marketing data.
In addition to HTTP cookies, this policy also covers related client-side and server-side tracking technologies, including:
- Local Storage / Session Storage: Web browser storage used to maintain application state (e.g., your language preference or dark mode selection).
- Tracking Pixels / Web Beacons: Miniature graphic files or script endpoints used to transmit interaction events.
- Server-Side Tracking Endpoints (e.g., Meta Conversions API): Events sent directly from our secure application server to analytical or advertising endpoints.
This policy applies to leveloper.io and is maintained in compliance with Article 5(3) of the EU ePrivacy Directive (Directive 2002/58/EC), Section 155(4) of Act C of 2003 on Electronic Communications of Hungary (Eht.), and the General Data Protection Regulation (GDPR).
2. Our Core Consent Principles
Leveloper builds software with engineering integrity. We apply a strict consent-before-tracking architecture:
- Zero Tracking by Default: When you first load our website, no analytical, session-replay, or advertising tracking scripts are loaded, and no non-essential cookies are placed.
- True Equal Choice: You can reject all non-essential cookies with a single, prominent click (“Reject All” / “Csak a szükségesek”). We do not use dark patterns, hidden reject buttons, pre-ticked checkboxes, or countdown timers.
- No Basic Analytics Leakage: Unlike setups relying on “Advanced Consent Mode” (which fire cookieless measurement requests before consent), our implementation completely suppresses Google Analytics 4, Meta Pixel, and Revisit network requests until you explicitly consent.
- Instant Revocation: You can reopen the Cookie Settings panel at any time via the link in our website footer and modify or withdraw your consent with immediate effect.
3. Categories of Cookies Used on Leveloper.io
Category 1: Strictly Necessary (Essential) Cookies & Storage
These technologies are indispensable for the operation, technical stability, and security of our Website. Under applicable law (Eht. § 155(4)), strictly necessary cookies do not require prior consent because their sole purpose is carrying out the transmission of a communication over an electronic communications network, or they are strictly necessary in order for us to provide an information society service explicitly requested by you.
- Legal Basis: Article 6(1)(f) GDPR (Legitimate Interest in website operation and security) and Eht. § 155(4).
| Cookie / Token Name | Provider / Source | Purpose | Type & Lifespan |
|---|---|---|---|
leveloper_consent_state |
Leveloper (First-Party) | Stores your granular cookie consent choices (Essential, Analytics, Replay, Marketing). | Cookie / LocalStorage · 12 months |
leveloper_session_id |
Leveloper (First-Party) | Maintains CSRF security tokens for form submission validation. | Cookie (Strictly Necessary) · Session |
_GRECAPTCHA |
Google Ireland Ltd. | Used by Google reCAPTCHA v3 / Cloud to provide bot defense on contact form endpoints. | Cookie · 6 months |
Category 2: Performance & Analytics Cookies
These cookies enable us to measure aggregate visitor metrics, understand which portfolio case studies and engineering topics receive interest, and identify technical bottlenecks across different browser configurations.
- Legal Basis: Article 6(1)(a) GDPR (Consent) and Eht. § 155(4).
- Default State: BLOCKED until explicit consent is given.
| Cookie Name | Provider | Purpose | Lifespan |
|---|---|---|---|
_ga |
Google Analytics 4 (Google Ireland Ltd.) | Distinguishes unique visitors via a randomly generated pseudonymized identifier. | 2 years (capped at 14 months) |
_ga_<container-id> |
Google Analytics 4 | Maintains session state and event counts across page views. | 2 years |
Privacy Protections: Google Analytics 4 runs with automated IP masking/truncation enabled. Event data retention is configured to 14 months.
Category 3: Session Diagnostics & Replay (Revisit.pro)
Revisit is our software platform used to analyze user interface friction, unexpected rendering errors, and navigation flows.
- Legal Basis: Article 6(1)(a) GDPR (Consent) and Eht. § 155(4).
- Default State: BLOCKED until explicit consent is given.
| Token / Storage Key | Provider | Purpose | Lifespan |
|---|---|---|---|
revisit_session_token |
Leveloper (Self-Hosted Revisit Instance) | Associates interaction events within an anonymous diagnostic session. | Session Storage / 24 hours |
revisit_anonymous_id |
Leveloper (Self-Hosted) | Allows deduplication of diagnostic recordings across browser reloads. | LocalStorage · 30 days |
Special Privacy Guardrails for Revisit:
- All contact form text fields, passwords, and user input areas are masked on the client side before any DOM snapshot is created.
- Session replay is fully disabled on the contact form page.
- Diagnostic data is stored on our self-hosted infrastructure in Hungary and purged within 30 to 90 days.
Category 4: Marketing & Conversion Tracking Cookies (Meta Pixel & Conversions API)
These technologies allow us to measure the performance of our B2B campaigns on Meta platforms (Facebook/Instagram), track validated contact form leads, and deliver relevant engineering capabilities to EU businesses.
- Legal Basis: Article 6(1)(a) GDPR (Consent) and Eht. § 155(4).
- Default State: BLOCKED until explicit consent is given.
| Cookie Name | Provider | Purpose | Lifespan |
|---|---|---|---|
_fbp |
Meta Platforms Ireland Ltd. | Stores and tracks visits across websites to measure ad conversion effectiveness. | 3 months |
_fbc |
Meta Platforms Ireland Ltd. | Stores click identifier parameters (fbclid) for campaign attribution. | 3 months |
Privacy Guardrail: We strictly prohibit the transmission of unhashed plain-text personal names, email addresses, or message contents to Meta via browser pixel or Conversions API payloads.
4. How to Manage and Withdraw Your Cookie Preferences
You are in complete control of your privacy settings:
1. Through Our On-Site Cookie Preference Center
You can adjust your granular preferences at any time by clicking the “Cookie Settings” / “Süti beállítások” link located in our website footer. Toggling a category off immediately blocks further data collection for that category.
2. Through Your Web Browser Settings
Most browsers allow you to manage cookie settings, reject third-party cookies, or delete stored cookies:
- Google Chrome: Settings → Privacy and Security → Third-Party Cookies
- Mozilla Firefox: Settings → Privacy & Security → Enhanced Tracking Protection / Cookies
- Apple Safari: Preferences → Privacy → Block all cookies / Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies
Please note that blocking strictly necessary cookies via your browser settings may prevent forms or secure elements on the Website from functioning properly.
5. Contact & Inquiries
For questions regarding our use of cookies or this policy, contact our Data Protection Lead:
- Email:
hello@leveloper.io - Company: Leveloper Informatikai és Szolgáltató Kft.
- Postal Address: 2483 Gárdony, Berzsenyi utca 73., Hungary