Privacy policy

Last updated 29 October 2026

This policy explains what personal data ТВОЕТО ИМЕ (ТВОЯТ АДРЕС, Sofia, Bulgaria) collects when you use this site, why, and what you can do about it. We are the data controller under the EU General Data Protection Regulation (GDPR). You can reach us at [email protected].

What we collect

  • Your account: name, email address and a securely hashed password. Needed to give you an account (contract).
  • What you share: comments and photos you post. Photos are re-encoded on upload, which removes their hidden metadata, including the GPS location phones record.
  • Your preferences: saved resorts, resort alerts and notification settings.
  • Security records: a log of account activity (sign-ins, failed sign-ins, changes) with the IP address it came from, so we can spot abuse and keep accounts safe (legitimate interest). Kept for 12 months.
  • Listing applications: the business and contact details hotels, restaurants and ski schools send us, to contact them about a paid listing.
  • Visit statistics: we count page views and visitors without cookies and without storing IP addresses; a visitor is recognised only within a single day through a value that cannot be traced back to them. We also use Cloudflare Web Analytics, which works the same way: no cookies, no fingerprinting and no tracking across sites.

Who else is involved

  • Providers that process data on our behalf: Google Cloud hosts the site in the EU (Belgium), Cloudflare delivers it and protects it from attacks, and Mailjet sends our emails.
  • Esri serves the map tiles. Your browser loads them directly, so Esri sees your IP address, like any website you visit.
  • YouTube: resort videos are found with the YouTube API Services, and a video only loads when you press play, from YouTube's privacy-enhanced domain. By playing one you agree to the YouTube Terms of Service, and Google handles it under the Google Privacy Policy.
  • The map around you: if you allow it, your browser tells the page where you are, so the map opens on your area and can show distances to resorts. This stays in your browser; it isn't sent to us.
  • Driving times from where you are: if you ask for them, your browser shares your location with us once, and we send it to the OSRM routing service to work out the drive. We don't store it.
  • Partner sites such as car rental: when you follow a link to one we count the click, without anything about you. The partner then knows you came from us (it may set its own cookies on its site) so it can pay us a commission.
  • Weather, snow and holiday data come from Open-Meteo and OpenHolidays; our server fetches it, and nothing about you is sent.

We don't sell personal data or use it for advertising.

How long we keep it

Account data and what you shared stay until you delete them or your account. Security records are deleted after 12 months, listing applications 2 years after they were answered.

Your rights

You can:

  • see and correct your details in your profile settings;
  • download everything we hold about you from your profile settings;
  • delete your account, which also deletes your comments, photos, saved resorts and alerts;
  • object to processing, or ask us to restrict it, by writing to us;
  • complain to your data protection authority (in Bulgaria, the Commission for Personal Data Protection).

Changes

If we change this policy in a way that matters, we'll say so on the site before the change applies.