1. Current sub-processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe Payments Europe Ltd | Subscription billing, invoicing, payment-method capture, fraud prevention. | Name, billing address, email, payment-card details (handled directly by Stripe). | Ireland (EU), with onward transfers to Stripe Inc. (USA) under SCCs. |
| Cloudflare, Inc. | DDoS protection, CDN/edge caching, TLS termination, Turnstile bot challenge. | Source IP, HTTP metadata, Turnstile tokens. | Global edge network. UK adequacy / SCCs. |
| 1&1 IONOS Ltd | Application hosting (compute, storage, database). | All account, site and analytics data we store. | UK & EEA. |
| Brevo SA | Outbound transactional and marketing email (SMTP + API). | Recipient email and name, message subject and body, delivery metadata, marketing-list membership. | France (EU). |
| Hostinger International Ltd | DNS for sincecode.com and inbound mailbox host for @sincecode.com addresses. | Inbound email content sent to any @sincecode.com address, DNS records for the domain. | EU. |
2. Sub-processors of customer-site visitor data
When you publish a site built with SinceCode, the same hosting and CDN sub-processors above serve your site to your visitors. Cloudflare may temporarily read visitor IPs to provide DDoS protection; IPs are not persisted by SinceCode.
If you embed third-party scripts on your site (e.g. analytics tag, marketing pixel, external chat widget), those scripts are not sub-processors of SinceCode. You are responsible for their data handling and any consent your visitors must give.
3. Changes
We update this page before introducing or replacing a sub-processor. Paying customers may request email notice by writing to privacy@sincecode.com.