Privacy Policy
This policy explains what TSNV collects when you read tsnvwrld.com, why, and what you can do about it. It describes what the site actually does.
Who we are
TSNV (tsnvwrld.com) is a hip-hop and trap music publication operated by Denislav Tsonev, Bulgaria. We are the data controller for the personal data described here.
Write to contact@tsnvwrld.com about anything here — including a request to see, correct or delete your data. Our contact page reaches the same inbox. TSNV is a small independent publication and does not publish a postal address; if you need one for a formal legal notice, ask by email and we will give you one.
You can reach us also through our contact page.
The short version
- Reading the site does not require an account, and we do not sell or share your data with advertisers.
- Analytics and session recording only run after you accept them in the cookie banner. Decline and neither loads.
- We count how many times each article is read, but that counter holds no information about who you are.
- Your dark-mode choice and your reading history for the “For you” section stay in your own browser. They are never sent to us.
- If you post a comment, we store what you typed along with your name, email and IP address.
What we collect, and why
When you simply read an article
Our hosting provider records standard server logs: your IP address, the page requested, the time, your browser’s user-agent string and referring page. This happens for every website and is how the server delivers pages and detects abuse. Our host also runs bot protection at the network edge, which inspects requests to block automated attacks.
Separately, the site keeps a view counter for each article — a single number that goes up by one. It records nothing about the reader, so we can tell you that a story was read 4,000 times, but never who read it.
We also log on-site search terms: the words typed into our search box, normalised and counted. No IP address or identifier is stored alongside them, so a search log entry cannot be traced back to a person.
To stop automated abuse of features like search and voting, the site briefly counts requests per visitor. The IP address is hashed with a secret site key before it is stored and expires within minutes — we never keep a readable IP for this purpose.
A small, sampled share of page loads sends anonymous performance timings (how fast the page rendered), so we can find slow pages. These carry no identifiers.
Cookies and your choice
When you first arrive, we ask whether you accept analytics. Nothing that measures your behaviour runs until you answer — if you decline, only the first four cookies below are ever set, and they exist purely to remember that you said no.
| Cookie | What it does | How long |
|---|---|---|
| Set always — needed for the site to work | ||
nd_consent | Remembers whether you accepted or declined, so we stop asking | 180 days |
wp_consent_statisticswp_consent_statistics-anonymouswp_consent_marketing | The same answer, written in the standard format the analytics tools read before they decide whether to run | 180 days |
| Set only after you accept | ||
_ga_ga_J7ZF0S419H | Google Analytics. Gives your browser a random ID so returning visits are not counted as new people, and ties your page views into one session. | 2 years |
_clck | Microsoft Clarity. Links your visits to one Clarity user ID. | 1 year |
_clsk | Microsoft Clarity. Groups the pages of a single visit into one replayable session. | 1 day |
Clarity also stores a short-lived value called _cltk for the duration of your visit, which your browser discards when you close the tab.
Durations for the Google and Microsoft cookies are set by those companies and can change; the ones we set ourselves are fixed at 180 days. To withdraw consent, clear this site’s cookies in your browser — the banner will come back and you can answer again.
If you accept: analytics
We use Google Analytics 4 to understand how many people visit, which articles they read and roughly where in the world they are. It is configured in “consent mode”: before you accept, it is blocked from writing cookies or identifiers. After you accept, it sets its own cookies to recognise a returning browser.
We do not use Google Analytics for advertising, and we have not enabled ad personalisation or data sharing for ad purposes.
If you accept: session recording
We use Microsoft Clarity to see how the site is actually used — where people click, how far they scroll, and where a page confuses them. Clarity reconstructs anonymous session replays and heatmaps from this.
This is more than counting visits, which is why it is behind the same consent. If you decline, Clarity does not load at all, and if you decline after having accepted, it stops. Microsoft automatically masks text content in recordings by default.
Comments
If you leave a comment we store the comment text, the name and email address you enter, your website if you provide one, and your IP address and browser user-agent. WordPress collects the last two as a standard anti-spam measure.
Your email address is never published. If you tick the “save my name, email and website” box, your browser stores that in cookies so you do not have to retype it; those last up to a year and you can refuse them by leaving the box unticked.
Comment avatars are provided by Gravatar, a service operated by Automattic. To fetch one, an encrypted (hashed) version of your email address is sent to Gravatar. Their privacy policy applies to that.
Things that never leave your browser
Some features work by remembering things locally. This data is stored in your browser only and is never transmitted to our servers:
nd-theme— whether you chose light or dark modend-history— the categories, tags and artists of the last few articles you opened, which is what makes the “For you” section relevant. It holds topic IDs, not article titles or personal details.- Saved stories — the bookmarks you add with the bookmark icon
- Short-lived technical values used by our caching layer
Clearing your browser’s site data for tsnvwrld.com erases all of it.
Embedded content from other sites
Articles sometimes embed posts, videos or players from other platforms — Instagram, YouTube and Spotify among them. An embed behaves as if you had visited that platform directly: it can set its own cookies and collect data about your visit, under its own privacy policy, which we do not control.
We also link out to ticket vendors and streaming services. Once you follow such a link, that company’s privacy policy governs what happens next.
Our legal grounds for using your data
- Consent — analytics and session recording. You give it in the banner and can withdraw it at any time.
- Legitimate interests — server logs, abuse prevention, hashed rate-limiting, aggregate view counts and performance timings. Our interest is keeping the site online, secure and worth reading; the data involved is minimal or carries no identifiers.
- Consent, given by submitting the form — publishing a comment you chose to write.
Who your data reaches
We do not sell personal data. It reaches only:
- Hostinger — our hosting provider, which runs the server and its logs
- Google (Analytics) and Microsoft (Clarity) — only if you accepted
- Automattic (Gravatar) — only a hashed email, only if you comment
- Anyone we are legally required to disclose to, such as a lawful request from an authority
Transfers outside the EEA
Google, Microsoft and Automattic are US-based and may process data outside the European Economic Area. These transfers rely on the EU–US Data Privacy Framework and on the European Commission’s Standard Contractual Clauses, together with the safeguards those companies publish.
How long we keep things
- Consent cookies — 180 days, then you are asked again
- Google Analytics — according to the retention period set in our Analytics property currently 14 months
- Microsoft Clarity — according to Microsoft’s own retention schedule for Clarity data
- Comments — kept indefinitely so conversations stay readable, unless you ask us to delete yours
- Server logs — for the period our hosting provider retains them
- Rate-limiting hashes — minutes
- View counts and search terms — indefinitely, as they contain no personal data
Your rights
If you are in the EEA or the UK, you have the right to ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time without affecting what happened before.
Write to contact@tsnvwrld.com and we will respond within one month. We may ask you to confirm your identity first — usually by writing from the email address you used to comment.
If you think we have handled your data badly, you can complain to your national data protection authority. In Bulgaria this is the Commission for Personal Data Protection (cpdp.bg).
Children
This site is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has left personal data here — in a comment, for instance — write to us and we will remove it.
Security
The site is served over HTTPS, access to the administration area is restricted to our editorial team, and we keep the software up to date. No website can promise perfect security, but we do not store payment details or passwords belonging to readers, so there is little of value to lose.
Changes to this policy
If we add a tool that collects something new, we will update this page and change the date at the top. If the change is significant — a new category of data, or a new purpose — we will ask for your consent again rather than quietly rely on the old one.
Contact
Questions about this policy, or about your data: contact@tsnvwrld.com, or via our contact page.