Discover Bulgaria

Privacy Policy

Last updated: August 28, 2026

Discover Bulgaria is a community travel guide to lesser known places in Bulgaria. This policy explains what data the website processes, why, and what choices you have. It describes the website as it is actually built and is written in plain language rather than as legal advice.

Who is responsible

Discover Bulgaria is operated at https://discoverbulgaria.net and was created by AniDigit (https://www.anidigit.com/).

Full controller details (registered entity, postal address and a contact email for privacy requests) are not yet published on this website. Until they are added here, privacy requests can be directed through AniDigit.

Browsing without an account

You can browse places, categories and place pages without creating an account. In that case we do not store profile data about you. Our infrastructure providers process technical connection data such as your IP address in order to deliver pages and protect the service.

Account data

If you register, we process the data you provide to Supabase Auth: your email address, a display name, and a securely hashed password. We never see or store your password in readable form.

You may also sign in with a third-party identity provider such as Google or Facebook. In that case Supabase Auth receives from the provider the identifying data needed to create your account, typically your email address and the display name and profile picture you have made available to it. We never receive your password with the provider.

Your session is kept in your browser's local storage so that you stay signed in. It is not stored in a cookie.

Content you create

Published places and their photos are public. Your email address is never published with them.

  • Favorites: the places you save are stored with your account so the list is available when you sign in.
  • Submitted places: the title, descriptions, location details, practical information and any Bulgarian translations you provide, together with your account as the owner.
  • Uploaded photos: the image files you upload are stored in Supabase Storage and linked to your submission.
  • Moderation status: whether a submission is awaiting review, published or rejected, plus the times it was created and updated.

Why we process this data

Account and content processing is necessary to provide the service you asked for. Security and abuse prevention rest on our legitimate interest in a safe website. Analytics rests on your consent, which you can withdraw at any time.

  • To create and maintain user accounts and to authenticate you.
  • To provide Favorites and the My Places area.
  • To accept place submissions and photo uploads.
  • To moderate community content before it is published.
  • To keep the service secure and to investigate abuse.
  • To operate, maintain and improve the website.
  • To measure website usage with analytics, but only after you give consent.

Analytics

We use Google Analytics 4 (measurement ID G-NP4Y2XRK9Q) only if you accept analytics in the consent banner or in Cookie Settings. Before that, the Google tag is not loaded at all and no analytics data leaves your browser.

The analytics events we send deliberately exclude personal data. We never send your email, name, user identifier, tokens, uploaded file names, submitted descriptions or the text you type into search. Events carry only safe values such as the interface language, a place slug, a place category, whether a search returned results and how many.

Advertising features stay switched off: ad storage, ad user data and ad personalization are always denied.

Language and preferences

Your language choice is stored in a first-party cookie so pages render in the same language on your next visit. Your cookie consent choice is stored in your browser's local storage. Neither contains personal information.

Maps

Place pages can show an interactive map built with Leaflet. Map tiles are requested from OpenStreetMap, which means your IP address and the requested tiles are visible to OpenStreetMap when a map loads.

Directions and "open in Google Maps" buttons are plain external links. Google Maps is not embedded in this website and is only reached if you choose to open it, at which point Google's own terms and privacy policy apply.

Service providers

These providers process data on our behalf or, in the case of OpenStreetMap tiles, receive the technical request your browser makes. We do not sell personal data.

  • Supabase: authentication, PostgreSQL database and file storage for accounts, places, favorites and photos.
  • Netlify: hosting, server-side rendering and deployment infrastructure, including technical request logs generated by serving the site.
  • Google Analytics 4: website usage measurement, only after your consent.
  • OpenStreetMap: map tiles requested by your browser when a map is displayed.

How long data is kept

We retain account and submitted content data for as long as necessary to provide the service or until deletion is requested, subject to legitimate security and legal requirements.

Published community content may remain visible while the account exists. Analytics data is retained according to the retention setting configured in our Google Analytics property. Technical logs generated by our hosting and database providers are kept for the limited period those providers apply for operations and security.

Your rights

If you are in the European Economic Area you have the right to access your data, to correct it, to have it deleted, to restrict or object to certain processing, to receive it in a portable format, and to withdraw consent at any time without affecting processing that already happened.

Analytics consent can be withdrawn instantly through Cookie Settings in the footer. For the other rights, contact us through the details above. You also have the right to lodge a complaint with the competent data protection supervisory authority in your country.

Requesting account deletion

You can request deletion of your Discover Bulgaria account and associated personal data at any time. See https://discoverbulgaria.net/data-deletion for instructions.

Children

The website is not directed at children and accounts are intended for adults or for minors with the consent of a parent or guardian.

Changes

If this policy changes materially we will update the date at the top of the page, and where the change affects consent categories we will ask for your choice again.