SHOWLANE · 2026-10-12.2
Cookies and Local Storage
Operator and contact details
- Name
- Vágó Péter János e.v.
- Registered address
- 1124 Budapest, Lejtő út 4.
- Tax number / registration
- 41852718-1-43 · 58098091
- Customer support
- v.peter@smartsquareproductions.com
- Customer support telephone
- +36 70 672 8020
- Privacy contact
- vproperty.hu@gmail.com
Current storage and Barion settings
Barion Base Pixel is configured on public pages with ShowLane's own merchant identifier. The private editor, billing form, approval pages and pages containing authentication data open without external tracking code. The provider approval status must be verified separately. The provider cookie descriptions below are based on Barion documentation; actual creation also depends on the browser and provider approval. Your marketing choice is a separate, versioned local setting, not general acceptance of the service terms.
| Name / group | Purpose | Validity |
|---|---|---|
| showlane_language | Functional display-language preference: hu or en. It does not sign you in, change account permissions, enable payment or grant marketing consent. Path=/; SameSite=Lax; Secure on HTTPS. | Up to 1 year (Max-Age=31536000). A new choice updates it; browser site data can be cleared. |
| showlane.session_token and necessary sign-in cookies | Authenticating your own account and returning securely from OAuth. Server-side session; HttpOnly and Secure on HTTPS. | The sign-in cookie belongs to the browser session. The server ends sign-in after five minutes of inactivity; background requests do not extend it. The OAuth transition is usable for a short time. |
| showlane-work-recovery – local browser storage (IndexedDB) | Unfinished text, editing settings, selected media files and image-request identifiers for your own account and customer profile. It does not store sign-in secrets, passwords or approval permission. | You can resume work in the same browser by signing in to the same account and profile. Saves are updated with the latest state and can be removed by clearing browser site data. They do not automatically sync to another device. |
| showlane:session-activity:* – localStorage | Coordinates browser tabs belonging to the same sign-in: a marker derived from a random session and an activity time. It contains no work text, email address or sign-in token. | Usable only for the server-verified five-minute session. An expired marker does not provide sign-in; clearing local site data removes it. |
| showlane-own-profile | A signed, owner-bound technical marker for the customer profile selected in your own account; it does not replace sign-in. | 24 hours. HttpOnly, Secure on HTTPS, SameSite=Lax. An expired or invalid marker opens only your own default Studio. |
| showlane_legal | Short-lived, signed evidence of the legal version presented before Google registration. | 10 minutes. |
| connection_oauth_states | One-time, session-bound initiation of an external connection. This is server-side state, not an advertising cookie. | Usable for 10 minutes. |
| showlane_barion_consent – local browser storage (localStorage) | Acceptance or rejection of marketing, decision time and the version of the consent notice. Current storage version: 2026-10-10.1. | We accept the choice for 30 days; after expiry or a version change, we request a new choice. Acceptance of an earlier version does not automatically authorise the new marketing feature. This is not a Barion cookie. A retained browser entry can also be removed by clearing local storage. |
| showlane_barion_result:<rendelésazonosító> – localStorage / sessionStorage | Prevents duplicate Pixel events for your own verified payment result after a reload. It contains a random order identifier, terminal result and recording time, but no email address, email hash or card data. It is not a Barion cookie or server-side payment evidence. | The localStorage version is usable for up to 30 days and 100 entries; the sessionStorage version belongs to the browser session of that tab. Clearing local site data removes it. |
| showlane_barion_social_intent – sessionStorage | Correlates the one-time event of a Google sign-in initiated by the user. It contains only a timestamp; no email or token. | Accepted for up to 10 minutes and deleted after success or cancellation. Validity does not itself constitute scheduled physical deletion. |
Account functions do not work if necessary cookies are blocked. The demo editor available without sign-in works in memory; it does not automatically save entered content.
Barion cookies and technologies after activation
Base fraud prevention may load on the homepage and public pages that can safely be opened, independently of the marketing choice. Fraud prevention processing of Full events enabled for Barion's review may also continue when marketing is rejected. Marketing use requires express consent; rejection and withdrawal do not authorise it. Sign-in forms, password recovery, the private Studio, billing forms and pages containing authentication data do not receive external Pixel code.
| Name / provider | Purpose | Browser lifetime reported by Barion |
|---|---|---|
| ba_vid, ba_vid.xxx – Barion Payment Zrt. | Fraud prevention, identifying visitors/devices and linking visits. | 1.5 years from the last update. |
| ba_sid, ba_sid.xxx – Barion Payment Zrt. | Fraud prevention and session identification. | 30 minutes. |
| BarionMarketingConsent.xxx – Barion Payment Zrt. | Stores the marketing consent declaration. | 1.5 years from the last update. |
| Media and advertising partner cookies | Matching identifiers and marketing use based on consent. | As specified in each partner's own notice; there is no shared expiry period. |
Barion may also use a digital browser fingerprint. A period measured from an update may restart with every update; the reported cookie lifetimes are not the server retention periods for all Barion data. ShowLane's own 30-day choice period and Barion's 1.5-year consent cookie are separate storage.
You can change or withdraw your marketing choice at any time through the Privacy Settings button. Full marketing functionality awaits its own provider approval; technical integration does not prove approval. Details: Barion's current privacy notice (English), current partner list, Barion Pixel cookie description.
Legal background
GDPR · Act CVIII of 2001 · Government Decree 45/2014 (II. 26.)