PostHog

With consent, we send public page visits, actions, registration steps, predefined campaigns, country and generic error categories to PostHog (EU). A pseudonymous code changes per day and browser tab and is not linked to your account. We send no names, contact details, visitor IP addresses, typed text or error contents. We do not record your screen. PostHog retention depends on the project settings and plan; clearing our own statistics does not delete these records. You can withdraw consent in Analytics settings.

PostHog · EU

First-party measurement

Only after analytics consent, Bulgaria Beyond records a public route without parameters, an opened item, a contact action, the date and an approximate country supplied by site infrastructure. A random session identifier is separately hashed for each UTC day. This report collects no email, telephone, enquiry text or precise coordinates. Daily sessions are not unique people. Reports are restricted to authorised administrators and start with this release, without reconstructed Google Analytics history. Events outside the 90-day window are deleted on the next measurement or report access. Refusal or withdrawal stops new measurements. Stored enquiries and advertising events are separate sources and do not represent confirmed stays. Hotel contacts are public only when explicitly entered in publication fields.

Data we use

Registration stores a display name, email and protected password hash. Voluntary submissions can include favorites, reviews, community posts and media, booking requests, property applications and advertising requests.

Why we use them

Data supports sign-in, saved content, moderation, delivery of a request to the selected partner, and partner or advertising administration. We do not sell personal data.

Storage and services

Structured data and uploaded files are stored in the site infrastructure (Cloudflare D1 and R2 through OpenAI Sites). Pages link to or embed OpenStreetMap, Wikimedia/Wikipedia and Google Maps; their own policies apply when used.

Your controls

From your profile you can change your password, remove your own reviews and request deletion of your account and associated personal data. Submissions or commercial records may be retained temporarily where needed for an active request, dispute or legal obligation.

Security and abuse prevention

Passwords are not stored as plain text. Sessions use HttpOnly cookies, and unpublished media is restricted to its owner and administrators. To limit automated abuse, we temporarily store a one-way hashed network identifier and request count for the short rate-limit window; expired records are cleared with subsequent traffic. No online system can guarantee absolute security.

Partner business contacts

For one-time partner invitations we may manually collect an accommodation name, legal entity, official website and a generic business email published on that same official domain. We retain the source URL, check date, manual KZP check result, approved draft and action history. We do not use personal or named addresses, and the module does not send messages automatically.

Partner opt-out

Each partner invitation includes an individual opt-out link. After opt-out we remove the usable email from the lead and retain only a one-way hash in a permanent do-not-contact list so the address is not added again. Use the link in the message or contact the sender address identified there.

Google Analytics

Only after explicit permission do we load Google Analytics 4 to understand visit totals, pages used and useful actions: navigation and outbound links, language changes, searches without the typed text, filters, maps, saves and shares, form starts and submissions, contact actions, app installation, scroll depth, engagement milestones, technical performance and an anonymised client-error category. Browser and device data, approximate area, first-party identifiers/cookies and site interactions can be processed. We do not send names, email addresses, phone numbers, messages, exact travel dates, typed search terms, coordinates, error contents or precise geolocation. Measured page locations retain only predefined public campaign labels (source, medium, campaign and content). Other parameters and fragments are removed. Referrer measurement includes only the referring origin, without a path or parameters.

With the same permission, the site keeps first-party pseudonymous reports for paid campaigns: impression or click, campaign, placement, date and a one-way hash of a random current-session identifier. We do not store a name, email address, IP address, typed text or cross-site behaviour in these reports. A session is counted at most once per advertisement, action and day; records older than 13 months are automatically removed on subsequent measured activity. Aggregated results are visible to the advertiser account and the Bulgaria Beyond owner.

The legal basis is your consent. Standard Google Analytics event data retention is set to two months. Advertising personalisation and Google Signals are disabled. Google processes the data as the service provider and may process it outside the EEA under applicable safeguards. You may refuse or withdraw consent at any time; when refused, Analytics is not loaded and we do not send cookieless measurements. See the Google Privacy Policy.

Controller and recipients

The data controller for this service is the Bulgaria Beyond Team. The official electronic contact is bulgaria.beyound.bg@gmail.com, with telephone contact at +359 876 615 523. Access is limited to authorised administrators and infrastructure providers needed to operate the site. Data from a particular accommodation enquiry is shared with the selected property only when the user submits it.

Retention periods and criteria

Sessions expire within 30 days of sign-in. Abuse-prevention records remain only until the end of the applicable short rate-limit window and are cleared with subsequent traffic. Account, favourites and submitted content remain while the account is active or until a valid deletion request. Enquiry, moderation and commercial records remain only while needed to process the matter, defend a dispute, prevent abuse or meet a legal duty, after which they are deleted or anonymised. Analytics and advertising-report periods are stated in section 08.

Required fields and decisions

A display name, email and password are required to create an account; without them an account cannot be created. Fields marked as required in an enquiry or submission are needed to send and process it. Other fields are voluntary. We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction, portability and object to processing. You may withdraw consent at any time without affecting processing that was lawful beforehand. To exercise a right, contact bulgaria.beyound.bg@gmail.com or +359 876 615 523. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection.

User sales listings

For sales listings we process the goods description, photos, price, location, seller details and supplied contacts. After approval and publication these fields are public; contacts are published only with explicit consent. Business details and food-operator registration are also part of the public listing. The sign-in email is not automatically included. The publication offer, its acceptance and review notes are available to the seller and administrators. Payment references and reports are handled by authorised administrators and are not public. These records support the requested advertising service and resolution of problems. My listings lets you edit, withdraw or delete your own listing. Withdrawal stops public access to the listing and its photos; deletion removes the listing and associated photos. Account-deletion requests include associated listings under the retention rules in section 10.

Listing drafts and statistics

Saved drafts are available in your account and are not published. With analytics consent, we measure listing views and phone or email clicks. Repeated actions from one browser session for one listing and day count once per action type. We use a daily code that differs for each listing; these records contain no visitor IP address, phone number or email. Statistics cover the last 30 days; older records are removed when the next measurement arrives. Results are visible to the seller and administrators. Signed-in sellers and administrators do not count towards their own activity. Review and expiry notifications appear in My listings; expiry is checked when notifications are opened. Deleting a listing removes its measurements and notifications.