Privacy, plainly.
This independent guide is published by Matthias Zeitler. For privacy questions, corrections or requests about your data, email me@matthias.net. Last updated: 19 October 2026.
When you request the guide
We use your email address to send the PDF download link you requested and to handle delivery problems. We record when the request was made, whether delivery was accepted, and whether the download link was used. A private download token protects your link; it expires after seven days. The request and delivery records are deleted after 90 days unless you separately choose updates.
Apartment enquiries
Apartment enquiry links open your own email app and send to Matthias Zeitler at me@matthias.net. Your message and contact details are used to answer your questions, arrange a viewing and follow up on the potential purchase. Enquiring about an apartment does not subscribe you to guide updates. Email correspondence is handled through the sender’s and recipient’s email services and retained for as long as needed to handle the enquiry and any resulting transaction.
Optional updates
The updates checkbox is optional and starts unchecked. If you choose it, we record your consent and ask you to confirm the subscription from the guide email. You can still download the guide without confirming updates. We keep a confirmed subscription until you unsubscribe or after 24 months without a new consent confirmation. Unconfirmed update requests expire after 30 days. Every update will include an unsubscribe link, and you can also email us to withdraw consent.
Why we process this information
Guide delivery fulfils your request. Optional updates rely on your consent. Limited security records help prevent automated abuse and repeated unwanted emails. We do not sell your email address or share it with activity providers.
Services involved
Cloudflare hosts the website, stores the guide and request records, protects the form against abuse, and delivers guide emails. It may process technical information, including your IP address and browser details, on its global network. These services may involve processing outside the European Economic Area under applicable transfer safeguards. The map loads tiles from OpenStreetMap when you open the map page; that service receives the technical details needed to serve those tiles. Fonts and most photos are hosted with the website. The food guide also offers optional Facebook photo embeds.
Restaurant photos from Facebook
Some restaurants share photographs through their official Facebook accounts. These embeds stay disconnected until you choose Show all Facebook photos. This enables every Facebook photo in the food guide; they load as you scroll. Loading them sends your IP address, browser details and the website address to Meta. Facebook may read or set cookies and associate the visit with your Facebook account if you are signed in. Its privacy policy applies.
We save this choice in your browser’s local storage for future visits, including new tabs and language changes, until you turn the photos off or clear this site’s browser data. If your browser blocks storage, your choice applies only to the current page. Choose Turn off Facebook photos in the food guide to remove all loaded embeds, stop pending loads and delete the saved consent. Other open food-guide tabs update too. This does not delete cookies already stored by Facebook. You can also use View original to visit Facebook directly. These choices are separate from website analytics and guide emails.
Language choice
English and Bulgarian pages have their own URLs. On the homepage, we use your browser’s language preference unless you have chosen a language yourself. The language switch saves that choice in a necessary first-party cookie for 180 days. It is separate from analytics and email consent, and is not shared with third parties.
Cookies and security
We do not set advertising cookies ourselves. Optional Facebook embeds may use their own cookies as described above. Cloudflare may use necessary security mechanisms when protecting the website or checking a form submission. Temporary rate-limit identifiers are hashed and removed after two days; raw IP addresses are not saved in the guide request database. Cloudflare infrastructure may maintain its own security logs under its policies.
Optional visitor analytics
If you accept analytics, Google Analytics 4 helps us understand which public pages visitors read and how often they successfully request the guide. No Google Analytics code loads and no analytics information is sent before you accept. Declining does not affect the website or the guide.
Analytics uses cookies to distinguish visits and processes page views, approximate location, device/browser information and a guide-request event. We do not send your email address, form contents, private download tokens, URL queries or URL fragments to Analytics. Private download and subscription pages are excluded. Advertising personalisation and Google signals are disabled.
Google processes this information on our behalf and may process it outside the European Economic Area under applicable transfer safeguards. Event-level data retention is two months; aggregated reports may remain longer. Analytics cookies expire after 180 days. We remember your consent choice in this browser for 180 days using local storage.
You can change your mind at any time using Analytics settings in the footer. Choosing No thanks stops Analytics and removes its cookies from this browser. Analytics consent is separate from optional email updates.
Your choices and rights
You can request access, correction, deletion or restriction of your personal information, object to relevant processing and request portability where applicable. Contact me@matthias.net. You may also complain to your local data protection authority. Withdrawing updates consent does not affect access to the guide or the lawfulness of earlier processing.
Links to other services
Booking and provider websites have their own privacy policies. We do not receive their booking or payment information through this website.