These providers support the OVERTRACKING service. The table distinguishes customer data from data about visitors to their websites.
Providers and processing
| Provider | Purpose | Data | Location and safeguards |
|---|---|---|---|
| Hetzner Online GmbH | Panel and analytics database (ClickHouse) hosting | Account data and visitor analytics data | Falkenstein (Germany) and Helsinki (Finland) |
| CubePath | Visit reception (pixel) and processing | Visitor analytics data | Barcelona (Spain) |
| Cloudflare, Inc. | DNS, anti-bot protection (Turnstile) and heatmap snapshot storage (R2) | Technical connection and verification data; heatmap snapshots | Global network; standard contractual clauses |
| MailShogun | Account email delivery | Customer data only; no visitor data | European Union |
| Stripe Payments Europe | Payment processing | Customer and payment data only; no visitor data | European Union / Ireland |
| Sign in with Google | Signing-in customer data only; no visitor data | Standard contractual clauses for international transfers |
Visitor data
Visitor data only passes through Hetzner, CubePath and Cloudflare (heatmap snapshots). MailShogun, Stripe and Google sign-in process customer data only, not their visitors’ analytics data. Analytics data is hosted in the EU; where an international transfer takes place, standard contractual clauses and GDPR safeguards apply.
Change notices
Customers receive advance email notice of additions or replacements of subprocessors. They may object on data protection grounds under the data processing agreement. For questions, use the contact form.