← back to the mahala

Privacy Policy

Last updated: July 2026

1. Data controller

Ivan Tride EOOD, Plovdiv, Bulgaria. Contact: contact@mahala404.com.

2. What we collect and why

• Order data - when you support the project or pre-order, Stripe collects your name, email, phone and shipping address. We receive this data and store it securely on our server, solely to fulfil your order, send you order-related emails and ship your rewards. Legal basis: performance of a contract.
• Payment data - card details are processed entirely by Stripe. We never see your card number.
• Server logs - our hosting provider (SuperHosting.BG) keeps standard technical logs (IP, time, requested page) for security. Legal basis: legitimate interest.
• Anonymous usage statistics - we count aggregate events on our own server (page views, which sections are viewed, interactions with the site’s games). No cookies are used, no IP addresses or identifiers are stored, and individual visitors cannot be identified or tracked across days. Legal basis: legitimate interest.
• Update notifications - if you sign up to get notified (e.g. when Episode 03 slots open), we store your email address and the date you signed up, only to write to you about MAHALA404. Legal basis: your consent, which you can withdraw at any time by writing to us - we will delete your address.
• Messages you send us - when you use a form on the site (ideas, brand partnership, 404 CREW), we store your email, name (if given) and message, and forward them to our inbox, only to reply to you. We keep them until the conversation is over or you ask us to delete them. Legal basis: legitimate interest / steps prior to a contract.
• Polls, radio and hearts - votes, “listening now” and hearts use a random identifier stored in your browser (cookie / session storage); it is not linked to your identity.

3. What we do NOT do

• No third-party analytics or advertising trackers.
• No marketing emails without your explicit consent.
• No selling or sharing of your data with third parties beyond the processors listed here.

4. Cookies

The public site sets no tracking cookies. Embedded YouTube videos load in privacy-enhanced mode (youtube-nocookie.com); YouTube may set cookies only after you interact with a video - see Google’s privacy policy. Stripe Checkout (on stripe.com) uses cookies strictly necessary for payment processing and fraud prevention.

5. How long we keep data

Order records are kept for as long as required for accounting and warranty purposes under Bulgarian law, then deleted.

6. Your rights (GDPR)

You can request access, correction, deletion or export of your personal data, and you can object to processing. Write to contact@mahala404.com. You can also lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).