Subprocessors
Effective Oct 14, 2026
The companies that process data for CageCard, what each one does and what it sees. We'll update this page before adding a new one.
Cloudflare, Inc.
- What for
- Runs the app, its network and DNS; the encrypted connection to the database; encrypted backups (R2); forwarding mail sent to our addresses
- What it sees
- Everything passing through the app; encrypted backups
- Where
- United States (global network)
Hetzner Online GmbH
- What for
- Servers for the database and the sync server
- What it sees
- Accounts and colony records
- Where
- United States
Resend, Inc.
- What for
- Sends email: sign-in links, invitations, password resets, reminders and digests
- What it sees
- Your name, email address and the email’s contents
- Where
- United States
Stripe, Inc.
- What for
- Payments and invoices
- What it sees
- Billing name, email and payment details (we never see card numbers)
- Where
- United States
Functional Software, Inc. (Sentry)
- What for
- Error reports when something breaks
- What it sees
- What failed and where in the code. No names, emails, IP addresses, cookies or entered data
- Where
- United States
Better Stack, Inc.
- What for
- Uptime monitoring and the status page
- What it sees
- None: it only checks that CageCard responds
- Where
- United States / European Union
If you choose to sign in with Google or Microsoft, they confirm who you are to us; that's covered by your agreement with them, not ours.
Institutions that need notice before a subprocessor is added can ask for it in a data processing agreement: privacy@cagecard.app.