Draft, not yet in force. Some details on this page are still being finalised.
Subprocessors
Last changed TBD — launch date · Version 1.1
These are the third-party services that may process personal data when we provide AffCheck. Each one is bound by a data processing agreement with us. This page is Annex III of our Data Processing Addendum.
Get notified of changes. Email privacy@affcheck.com with the subject "Subprocessor updates" and we will email you at least 14 days before we add or replace a subprocessor. Account owners are notified automatically.
Contents
- Subprocessors
- Not subprocessors: services that act on their own account
- Self-hosted tools
- Change history
Subprocessors
| Subprocessor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | Servers, database, backups | All service data | Germany (EU) | Not needed (EU) |
| Cloudflare, Inc. | DNS, CDN, TLS, attack protection; R2 storage for uploaded network files (encrypted, 90 days), exports and encrypted backups | Traffic in transit; stored files | Global network; R2 bucket in the EU jurisdiction | Data Privacy Framework; SCCs |
| Resend (Plus Five Five, Inc.) | Transactional email: sign-in links, weekly deadline emails, free-check links and result totals you ask for, founding pre-order confirmations | Recipient email address; totals and counts | United States | SCCs |
| Crisp IM SAS | Support chat. Not switched on yet: it is listed here in advance, so the 14 days' notice have passed before it starts. No chat code loads while it is off, and once it is on, nothing loads until you press "Chat with us" — never on the free tools at /tools | Your name, email and messages, if you open the chat | France (EU) | Not needed (EU) |
| Google LLC (Google Workspace) | Support mailbox | Emails you send us and our replies | United States / global | Data Privacy Framework; SCCs |
Not subprocessors: services that act on their own account
| Service | Role |
|---|---|
| Paddle.com Market Ltd and its affiliates (UK/US) | Reseller and Merchant of Record for founding pre-orders and web-app subscriptions. Independent controller under its privacy notice. |
| Shopify Inc. and affiliates | Your store platform, and the biller for App Store subscriptions. AffCheck reads your store data through Shopify's APIs on your instructions. |
| Affiliate networks (Awin, CJ, Rakuten Advertising, impact.com, Webgains and others) | Your own providers. Data flows to or from them only when you upload their exports, connect their API or submit decisions. |
| Google LLC (Sign in with Google) | Authenticates you on the web app if you choose Google sign-in. |
Self-hosted tools
These run on our own servers at Hetzner in Germany, so no third party receives data through them: Postgres (database), Umami (cookieless website analytics), GlitchTip (error tracking), and Grafana/Loki (logs).
Change history
| Date | Change |
|---|---|
| 19 September 2026 | First version. |