Privacy Policy

This policy explains which personal data Stotna (stotna.com) processes, why, with whom it is shared and what rights you have. The General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act apply.

1Controller

The controller is [ДРУЖЕСТВО / COMPANY NAME], company ID (ЕИК) [ЕИК], [АДРЕС НА УПРАВЛЕНИЕ / REGISTERED ADDRESS]. For anything concerning your data: hello@stotna.com.

2What we process

Account: email, nickname, password (stored only as a hash), registration date, email verification status.

Profile (optional): city, short bio, photo, seller type (private/merchant), name and phone if you provide them.

Listings and collection: the descriptions, structured data and photos you publish, including the notes in your private collection (visible only to you).

Communication: messages, offers and barter proposals between you and other users, and reports you submit.

Paid services: service requests, billing details you provide and activation notes. We store no payment card data.

Technical data: IP address, device and browser type, access times and error records generated by using the site; cookies as described in the Cookie Policy.

Moderation: reasons and history of actions taken on your account or listings (warning, suspension, hiding).

3Why, and on what legal basis

• Performance of the contract with you (Art. 6(1)(b) GDPR): registration, publishing listings, messages, offers, paid services, emails about new messages (you can switch these off in your account).
• Legitimate interest (Art. 6(1)(f)): platform security, fraud and abuse prevention, moderation, protection against automated traffic (Cloudflare Turnstile), service improvement.
• Legal obligation (Art. 6(1)(c)): accounting and tax requirements for paid services; responding to lawful requests from authorities.
• Consent (Art. 6(1)(a)): only where we ask for it explicitly for a specific purpose; you can withdraw it at any time.

We make no automated decisions with legal effects and do not use your data for third-party advertising.

4Who sees what

Public: your nickname, city, bio, seller type, the "Email verified" label, your public listings and — if you choose — your collection. Your email and phone number are not public. Messages are seen only by the two participants and, upon a report or review, by moderators.

5Processors and recipients

We use providers that process data on our behalf and under our instructions:

• Supabase (database, authentication, photo storage) — data centre in Frankfurt, EU;
• Vercel (application hosting) — Frankfurt region, EU; parts of Vercel's infrastructure may involve transfers outside the EU under standard contractual clauses;
• Cloudflare (DNS and bot protection via Turnstile);
• Resend (sending confirmation, sign-in and new-message emails).

We do not sell personal data. We may disclose data to competent authorities where legally required.

6Retention

• Account data — for as long as the account exists; after closure it is deleted or anonymised within 30 days, unless the law requires longer (e.g. accounting records — up to 10 years).
• Listings — until you delete them; deleted listings are kept anonymised for moderation traceability.
• Messages — for as long as the participants' accounts exist.
• Technical records — up to 90 days.

7Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Write to hello@stotna.com; we answer within one month. You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg).

8Security

We use encrypted connections (HTTPS), password hashing, database-level access separation and protection against automated traffic. Access to administrative functions is limited to designated staff and is logged.

9Children

The platform is intended for persons over 18. We do not knowingly collect children's data.

10Changes

We will notify you of material changes by email or in the platform. The date of the last change is shown below.

[ДРУЖЕСТВО / COMPANY NAME] · [АДРЕС НА УПРАВЛЕНИЕ / REGISTERED ADDRESS] · hello@stotna.com

Last updated: September 13, 2026