Subprocessors
Last updated: 2026-09-10. We give advance notice before adding or replacing a subprocessor, as described in the DPA §6.
| Provider | Role | Data processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, database, object storage, rendering, bot check on sign-up (Turnstile), cookieless page-view measurement (Web Analytics) | Account data, templates, generated output, logs, IP and user agent for the bot check, request metadata for page-view measurement (no individual identification) | United States and global edge network |
| Stripe, Inc. | Payments and subscriptions | Email, payment method, billing details | United States |
| Resend, Inc. | Transactional email | Email address | United States |
| Anthropic, PBC | AI features — only when you use them | The template generation prompt you submit | United States |
| Google Ireland Limited / Google LLC | Website analytics and campaign measurement (with consent) · purchase-conversion measurement (server-side, regardless of consent) | IP address, device and browser information, pages viewed, referral source · purchase conversions (plan and amount, no identifiers) | Ireland and United States |
Anthropic is involved only if you use an AI feature. If you do not use those features, nothing is sent.
The Google tag loads only if you allow analytics or marketing cookies. If you refuse — or have not answered yet — the tag is not loaded. One exception: when you complete a purchase, we send a server-side record of it (plan and amount, no individual identifiers) to Google to measure conversions, regardless of your cookie choice (legitimate-interest basis; you may object). You can change your answer at any time; see the Cookie notice.
We do not use advertising networks, data brokers or cross-site trackers, and we do not sell or share personal information for money.