Subprocessors List
Service operator: Jakub Ciepielowski.
Contact: [email protected]
1. Introduction
To provide the service, we use trusted third-party providers (subprocessors) that process some data on our behalf. We have appropriate data protection commitments with each of them, and transfers outside the EEA rely on GDPR-compliant mechanisms (e.g. Standard Contractual Clauses).
2. Current Subprocessors
| Provider | Purpose of processing | Location |
|---|---|---|
| Stripe Payments Europe, Ltd. | Payment and subscription processing | EU / USA |
| OVHcloud (OVH SAS) | Server hosting (VPS) and email delivery (SMTP) | EU (France / Poland) |
| Cloudflare, Inc. | CDN, proxy, attack protection (including Turnstile); storage of files and backups (Cloudflare R2) | EU / USA |
| Google LLC (Google Drive) | Storage of transport-encrypted backups of the database and configuration | EU / USA |
| Google LLC (Google Analytics, Google Ads) | Traffic analytics and conversion measurement (with consent only) | EU / USA |
| Google LLC / Meta Platforms / Apple Inc. | OAuth social login (when you use it) | EU / USA |
| Plausible Insights OÜ | Cookieless analytics (aggregated traffic statistics) | EU (Estonia) |
| Microsoft Corporation (Microsoft Clarity) | Usage analysis and session recording on public pages and in the photographer panel, excluding client galleries (with consent only) | EU / USA |
| Google Fonts (Google LLC) | Delivery of web fonts (IP address on download) | EU / USA |
| Push notification providers (Google, Mozilla, Apple) | Delivery of web push notifications to the client's browser (when the client enables them) | EU / USA |
| Telegram | Support chat handling and technical alerts (when you use the chat) | International |
3. Photo Storage
Original photos and previews may be stored in Cloudflare R2 object storage and on the hosting server. We process photos solely to provide the gallery service. Backups of the database and configuration are stored in Cloudflare R2 and on Google Drive (rotating, up to 30 days; weekly copies up to 90 days).
4. Changes to the List
We may update the list of subprocessors as the service evolves. We will announce significant changes that may affect the protection of your data within the service.
5. Contact
For questions about subprocessors and data processing, contact: [email protected].