Subprocessors
Last changed 1 October 2026 · Version 1.1
These are the third-party services that may process personal data when we provide SitesProof. Each one is bound by a data processing agreement with us. This page is Annex III of our Data Processing Addendum.
Get notified of changes. Email privacy@sitesproof.com with the subject "Subprocessor updates" and we will email you at least 14 days before we add or replace a subprocessor. Account owners are notified automatically.
Contents
- Subprocessors
- Not subprocessors: services that act on their own account
- Self-hosted tools
- Change history
Subprocessors
| Subprocessor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Hetzner Online GmbH | Hosting and database | Germany | EU (no transfer) |
| Cloudflare, Inc. | DNS, CDN, file storage | Global (EU storage) | Data Processing Addendum with SCCs |
| Resend, Inc. | Transactional email | United States | Data Processing Addendum with SCCs |
| Ahrefs Pte. Ltd. | Website analytics on the marketing pages (Ahrefs Web Analytics): page URL, referrer, browser and device type, and a country derived from the IP address. Cookieless, and not loaded at all if your browser sends Global Privacy Control or Do Not Track. | Singapore, with EU edge processing | Data Processing Addendum with SCCs |
Not subprocessors: services that act on their own account
| Service | Why it is not a subprocessor |
|---|---|
| Creem (creem.io) | Our reseller and Merchant of Record. Creem is the seller for every order and processes payment data as an independent controller. |
| Google (sign-in) | Used only if you choose "Continue with Google". Google acts under its own terms. |
Self-hosted tools
These run on our own servers at Hetzner in Germany, so no third party receives data through them: Postgres (database), GlitchTip (error tracking), and Grafana/Loki (logs).
Change history
| Date | Change |
|---|---|
| 2 October 2026 | First version. |