Subprocessors
The parties that process data on our behalf, what each one does, and where.
Last revised: 20 August 2026.
The parties below process personal data on our behalf and on our instructions. The list was derived from the service’s own configuration.
| Party | What it is for | What data it reaches | Where |
|---|---|---|---|
| Scaleway — Generative APIs | Generating answers and apps with the GLM model. | The text of requests and the context sent with them, on accounts with artificial intelligence switched on. It does not receive the account holder’s identity. | A French company. We do not assert the exact inference region. |
| Scaleway — Transactional Email | Sending access messages and the messages the service sends on your instruction. | Recipient address, subject and message body. | France, region fr-par, per the service configuration. |
| Cloudflare | Domain name resolution and routing of mail received at addresses on the domain. | Mail received on the domain, including sender, subject and body. Requests to the site do not pass through this network. | A United States company, with a globally distributed network. |
| Hetzner | The server that runs the service, the database and the accounts’ workspaces. | All the data described in the Privacy Policy, for as long as it is kept. | A German company. We do not assert the specific data centre. |
| Let's Encrypt (ISRG) | Issuing the certificates that encrypt the connection to the site. | No user data. Only the domain name and an administrative contact address. | A United States non-profit organisation. |
| Perplexity — Sonar / Chat Completions | Web search through Sonar using Chat Completions. The Search API is not used and the Search Addendum does not apply. | Only the search-query text is sent, with no account identity. Under Perplexity’s contractual confirmation, zero data retention applies to Sonar / Chat Completions requests; we have not independently verified this. | Processing on AWS in North America, in the United States; no region in the EU is available. The transfer relies on the European Commission’s standard contractual clauses (SCCs). |
Any addition to this list is announced on this page before it goes into service. A distributed map component fetches its imagery from public OpenStreetMap servers, which reveals your browser’s IP address to those servers; that happens only in apps that use that component.
Continue to Retention