FALSE MAP / Privacy

Privacy overview.

How personal information is handled on the public site and in private testing. Updated 3 October 2026.

Who is responsible

FALSE MAP is the brand of Georgi Dimitrov, acting as an individual from Bulgaria and responsible for the personal information described here. FALSE MAP is not a separate company or legal entity. Contact the operator at contact@falsemap.com or privacy@falsemap.com for privacy requests.

Operator address and telephone: Legal contact details.

Public pages and hosting

Public pages have product search forms but no contact forms or third-party analytics or advertising trackers. First-party measurement records page views, search submissions, product-card clicks and outbound clicks with source, market and product context. These events do not contain search text, full URLs, IP addresses, user identifiers or access tokens. Click measurement uses a short-lived signed product token, which is not retained in event logs. Events use the existing hosting log retention described below. Homepage, guide and example media are served by this site. Public catalogue search filters product links stored on our server. On /search, selecting eBay UK and submitting a query sends the product name and condition preference to eBay through our server. On /search-v2, an enabled eBay section may load automatically for an eligible submitted query, without a separate eBay selection. Search terms and filter choices appear in the page URL and may appear in hosting logs. Public eBay result images may load directly from external image hosts, which receive your IP address and browser request information. When public search is enabled, the search page uses a necessary, secure session cookie for CSRF protection. It is not an advertising identifier. Ordinary editorial browsing does not require that cookie. Loading the homepage, guides or examples does not call search providers. Visiting a page sends ordinary request information, such as your IP address, requested URL, time and browser information, to our hosting provider, Render. Hosting and application logs may record this information for operation, troubleshooting and security. Do not put personal information in page URLs.

Email and early-access enquiries

Email links open your email service. Sending a message gives us your email address, any name, message and attachments you include, and email delivery information. We use these to answer enquiries and arrange requested beta testing. Namecheap Private Email hosts our contact mailbox. Georgi Dimitrov is the only person with operator access. The primary mailbox is contact@falsemap.com; privacy@falsemap.com is its only alias, receives mail in the same inbox and cannot send mail. Messages are forwarded to contactfalsemap@gmail.com, with a copy kept in the Namecheap mailbox. No server-side email filters or catch-all address are configured. Namecheap processes messages to provide the email service; provider-side processing and copies are separate from this operator access. There is no automatic waitlist, signup database or account creation on this site; an enquiry does not reserve a place. Providing these details is voluntary, but we need a reply address to respond. Please do not send sensitive information or access codes.

Essential beta cookies and access data

The invitation form uses the essential falsemap_beta session cookie for access and request protection. Successful login starts an eight-hour beta session; activity does not extend it. The signed cookie is readable, not encrypted, and contains an opaque invitation identifier, its digest, issue time and request-protection data, not your raw access code. Access codes are processed to verify an invitation. The server holds configured invitation identifiers and code digests; this does not create a user account. A temporary login counter contains a time and attempt count, not an IP-based visitor profile. Logging out removes this browser's beta cookie; revoking an invitation prevents further access once the configuration is applied.

Saved offers on your device

The private-beta Saved feature stores up to 100 offer titles, prices and links in your browser's local storage. It is not an account or a server-synchronised favourites list. These entries have no automatic expiry; remove saved items or clear this site's browser storage. Logging out does not clear saved offers. The account panel is a design preview and does not submit registration details.

Searches, providers and external destinations

Product queries, market and condition choices are processed to find and compare offers. Access depends on the current public-search configuration. Depending on enabled sources, queries and related product information may be sent to services including Brave Search and eBay, and product pages may be requested from sellers. Search diagnostics may include queries, offer information and errors in application logs; do not search for sensitive personal information. Our current Brave and eBay search adapters do not forward your IP address, cookies or browser headers; providers receive our server request and network information. Our eBay integration uses production application credentials to search public product data, without asking you to sign in to eBay or authorise access to member data. Search result images may load from external hosts, receiving your IP address and browser request information.

Opening a seller link takes you to a separate service. Sellers and any affiliate networks involved may process click identifiers, referral information, IP addresses, cookies and purchase attribution under their own notices and consent controls. Public layout demo cards have no merchant links or live availability. Separate manual Amazon UK cards contain outbound affiliate links labelled (paid link). These links do not use an Amazon API or live search integration and do not imply final Amazon Associates acceptance or Creators API access.

Affiliate disclosure

Selected outbound links may be affiliate links and may earn us a commission from qualifying purchases. Manual Amazon UK links are labelled (paid link) and are separate from the layout demos. Optimum Nutrition UK catalogue access is through Awin. Other programmes are not implied. Amazon picks do not imply final Amazon Associates acceptance or Creators API access. Affiliate seller links must be identified beside the link before activation. Prices and availability must always be checked with the seller.

Purposes and legal bases

Where the GDPR applies, our legitimate interests are operating and protecting this limited beta, answering messages you initiate, and providing requested product comparisons. We use the information described above for those purposes. An enquiry is not consent to a marketing mailing list. If a new activity requires consent, it must be requested separately before that activity starts. Any legal obligation requiring information to be retained will be assessed separately; we do not claim a fixed statutory retention period for all data.

Retention and service providers

The eight-hour limit applies to beta access, not to all data. Saved offers remain on your device until removed. Invitation configuration remains until the operator removes or replaces it. The application does not implement automatic deletion of email correspondence or hosting logs. Our correspondence policy, adopted on 13 September 2026, provides for a review at least every 30 days. Routine enquiries are deleted at the first review after 90 days from closure, no later than 120 days from closure. Correspondence kept longer for a specific legal, accounting, security or other justified purpose is separated, limited to what is needed and assigned a documented reason and review date. Deletion requests are assessed when received rather than held for the routine review. This policy concerns copies controlled by the operator, including forwarded Gmail copies; it is not a promise of immediate erasure from provider backups. The first review of the Namecheap mailbox was completed on 27 September 2026. No messages required deletion and no justified retention exceptions were recorded. The next review is due by 27 October 2026.

Hosting, email, search and destination services may process information in other countries. Applicable locations and transfer safeguards depend on the service and account configuration. Our Render service is in Frankfurt (EU Central), on a Hobby workspace, with no external log-stream destination configured in workspace Observability. This does not mean all processing is confined to the EU; Render's provider terms govern retention and international transfers. Render documents seven-day dashboard log retention for Hobby; this is not a statement about every internal provider record or backup. Namecheap publishes Phoenix, United States, as the location of its Private Email infrastructure. Its published daily backup periods depend on the platform: 14 days for the legacy platform or up to four weeks for the new platform. We have not verified which platform or backup period applies to our mailbox, or the final erasure time of individual messages. Its Data Processing Addendum describes US processing and provisions for standard contractual clauses for international transfers.

We use Brave Search API on a Search plan with postpaid billing. We have not verified a zero-data-retention arrangement for our Brave Search API account. Brave's API privacy notice describes query retention of up to 90 days, subject to legal obligations, and US processing and international transfers. eBay describes international processing and retention according to purpose and legal obligations; we have not verified a fixed retention period for Browse API query logs. Its API agreement and Data Processing Addendum include independent-controller provisions and conditions for standard contractual clauses for international transfers.

Your choices and rights

Where applicable under data-protection law, you may request access, correction, deletion, restriction or portability of your personal information, and object to processing based on legitimate interests. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. Rights depend on the circumstances; we may need proportionate information to verify a request. Email contact@falsemap.com or privacy@falsemap.com and describe your request without sending an access code. You may also complain to the Commission for Personal Data Protection in Bulgaria (CPDP), or another competent data-protection authority, including in the country where you live or work where the GDPR applies. Product comparison does not make decisions with legal or similarly significant effects about you.