Privacy Policy
Effective 1 September 2026
Glasnik is a professional network where you can speak about your working life under a pseudonym, while other members can see that your employer has been verified. That design creates an unusual privacy obligation: we have to prove something about you without being able to reveal who you are. This policy explains exactly how we do that, and what we do and do not keep.
Controller. ГЛАСНИК ООД (GLASNIK LTD OOD), company number 208861127, registered at 18A Neofit Hilendarski str., Vitosha District, Sofia 1434, Bulgaria, is the controller of your personal data. Privacy contact: privacy@glasnik.bg.
1. The short version
- We do not keep your work email address alongside anything you post. It is held separately and in protected form, together with its domain.
- Your posts, comments and reviews are published under a pseudonym, never your real name.
- We do not sell your data, and we do not share it with advertisers.
- You can delete your account from inside the app, and that deletion is real.
2. What we collect
2.1 Account information
When you create an account we collect your email address and a password, both handled by our authentication provider. We never see or store your password. If you sign in with Google or Apple we receive your email address and, where you allow it, your name.
2.2 Your profile
You may provide a username (a pseudonym you choose or we suggest), job role, employer name, seniority level, an experience band, an avatar selection, a short bio, and up to three interests. All of this is optional except the username, and all of it is chosen by you.
2.3 Work email verification — the important part
To post or comment, you verify that you control a work email address. When you do:
- We send a one-time code to that address.
- The address is held temporarily in memory (in our cache, for fifteen minutes) only so that the code can be matched to it.
- On success we store the address in protected form and the domain part (for example
example.com). The address itself is then discarded and never written to permanent storage.
This lets us confirm that a given address has already been verified. The domain lets us link you to an employer so that reviews come from people who actually work there. Neither can be reversed into your email address.
2.4 Content you create
Posts, comments, reviews, poll votes, likes, saved items and guild memberships. Reviews include the ratings, and the pros and cons text you write.
2.5 Technical data
Standard server logs including IP address and request metadata, retained for security and abuse prevention. We do not currently use analytics or advertising SDKs. If that changes, this policy will be updated before the change takes effect, and where consent is required we will ask for it first.
2.6 What we do not collect
We do not collect your location, contacts, photos, health data, financial data, or any special category data under Article 9 of the GDPR. We do not track you across other apps or websites.
3. Why we use it, and on what legal basis
| What we do | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Create and run your account | To provide the service you signed up for | Contract — 6(1)(b) |
| Verify your work email | To make verified-but-anonymous participation possible | Contract — 6(1)(b) |
| Publish your posts, comments and reviews | Core function of the service | Contract — 6(1)(b) |
| Link you to an employer via your email domain | So reviews come from verified employees | Contract — 6(1)(b) |
| Automatically screen content for personal information and abusive language | To protect you from accidentally identifying yourself, and to protect others | Legitimate interests — 6(1)(f) |
| Handle reports, moderate content, ban abusive accounts | To keep the platform safe and lawful | Legitimate interests — 6(1)(f) |
| Rate limiting, security logging, fraud and abuse prevention | To keep the service available and secure | Legitimate interests — 6(1)(f) |
| Respond to lawful requests from authorities | Because we must | Legal obligation — 6(1)(c) |
| Any future analytics or marketing | — | Consent — 6(1)(a), asked for separately |
Where we rely on legitimate interests, we have considered your rights and concluded that the processing is limited to what is necessary and is what a member would reasonably expect. You can object at any time — see section 7.
4. Who processes your data
We use a small number of providers, each bound by a data processing agreement:
| Provider | What they do | Where |
|---|---|---|
| Google (our authentication provider) | Stores your login credentials and authenticates you | United States, under Standard Contractual Clauses |
| Microsoft (our cloud provider) | Hosts our application, database and cache | European Union — North Europe region |
| Microsoft (our cloud provider Communication Services) | Sends verification emails | European Union |
Content screening runs inside our own application. Your posts are not sent to any third-party moderation service.
We do not sell personal data, and we do not share it with third parties for advertising.
5. What other people can see
- Your username, job role, employer, seniority and avatar appear on content you post, unless you post anonymously.
- When you post anonymously, your username is hidden and your avatar is randomised. Your role and employer may still be shown, because that context is the point of the post. Please bear this in mind if you work somewhere small — a specific role at a small employer can identify a person.
- Your email address, work email address, and internal identifiers are never shown to anyone.
- Saved items are private and are never visible to other members.
- Reviews show that the author is a verified employee of that organisation. Your role is shown only if you choose to reveal it.
6. How long we keep it
| Data | Retention |
|---|---|
| One-time verification codes | Up to 10 minutes, then deleted automatically |
| Work email address awaiting verification | Up to 15 minutes, in cache only, then deleted |
| Work email hash and domain | Until you delete your account or change employer |
| Account and profile | Until you delete your account |
| Posts, comments, reviews | Until you delete them, or you delete your account |
| Server and security logs | 90 days |
7. Your rights
Under the GDPR you have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on it.
- Erasure is available directly in the app: Settings → Account → Delete account. It removes your personal data, removes your content from the service, releases your work-email verification, and deletes your login. You can also request it at privacy@glasnik.bg — see our deletion page.
- For any other request, contact privacy@glasnik.bg. We will respond within one month.
You also have the right to complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни), or to the authority in your country of residence.
8. Security
Passwords are handled by our authentication provider and never reach our servers. Work email addresses are held in protected form, separately from platform content. All traffic is encrypted in transit. Our database and cache sit in the European Union with access restricted to the application. Verification codes are single-use, expire quickly, are rate limited, and are never written to our logs.
9. Children
Glasnik is for working professionals and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact privacy@glasnik.bg and we will remove it.
10. Changes
If we change this policy we will update the effective date and, for any change that materially affects your rights or introduces a new purpose for your data, tell you in the app before it takes effect.
11. Contact
ГЛАСНИК ООД (GLASNIK LTD OOD)
18A Neofit Hilendarski str., Vitosha District, Sofia 1434, Bulgaria
Privacy: privacy@glasnik.bg · Data protection contact: Management of ГЛАСНИК ООД