Sub-processors

Dated list: 2026-10-04.

• Hetzner — application hosting and self-hosted Supabase PostgreSQL, Auth and Storage — Falkenstein, Germany
• Vercel — domain registration and DNS
• Umami (self-hosted at Hetzner, Germany), cookieless
• Mixpanel — no longer collects data; holds earlier events only until erased — EU project
• Stripe — payments — US/EU
• Resend — transactional email — US
• Google — OAuth sign-in — US

DPAs should be in place with these processors before broader commercial operation.