Subprocessors

The third parties that handle data on this site's behalf, and what for.

Last updated

Draft. The bracketed entries are still to be confirmed before launch.

The list

ProviderWhat forWhere
[fill in: email provider — MailerSend was chosen in D84]Sending the emails this site sends: confirmations, resets, request updates, exports.[fill in]
Cloudflare, Inc.Turnstile, the spam check on the public forms, when it is switched on.Global; the check itself carries the challenge token and your IP address.
Google Ireland Limited (Google Analytics 4)[Draft, for review:] Counting visits, only for a visitor who pressed "Accept analytics", on this site’s own address. Never a name, an email, a link’s token or a user id.EU, with transfers to Google LLC in the US under the EU–US Data Privacy Framework and standard contractual clauses [fill in: confirm]
[fill in: hosting provider]The servers, database, cache and object storage everything runs on.[fill in: hosting location — do not claim the EU until it is true]
[fill in: where backups are stored]Daily database dumps, kept for the window stated in the privacy policy.[fill in]

Not on the list

Language detection, when it is on, uses a copy of the MaxMind GeoLite2 country database stored on the server itself. Nothing is sent to MaxMind, so it is not a processor. The Open Filament Database is fetched nightly for filament suggestions; nothing about you is sent with that request.