Subprocessors
Last updated: October 25, 2026
The following third-party companies process personal data on our behalf to deliver the NegotiateIt service. Each subprocessor has a Data Processing Agreement (DPA) in place with us.
We will update this page when we add or remove subprocessors. If you have subscribed to our service, we will notify you of material changes via email at least 30 days before a new subprocessor begins processing personal data. Changes to the independent controllers listed below are announced through updates to our privacy policy (Section 13).
Recent changes (October 2026): Creem (payments) and Google Sign-In moved to their own section below, and Apple (Sign in with Apple, App Store purchases) added there. All three act as independent controllers for that data, not on our behalf, so they are not subprocessors for it.
Recent changes (May 2026): Plausible Analytics removed. PostHog now also powers cookieless analytics on the marketing landing page (a daily-rotating pseudonymous hash derived server-side from IP address and browser type; the raw IP address is never stored). Google Fonts removed as a runtime dependency — fonts are now served from our own infrastructure, so no IP address is transmitted to Google for typography rendering.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic | AI model provider (Claude) for generating NPC dialogue and game decisions | Player messages, game context (per-turn, not stored by us beyond API call) | United States |
| Google (Gemini API) | Backup AI model provider for dialogue generation | Player messages, game context (when used as fallback) | United States |
| Fly.io | Application hosting and database (Postgres) | All application data (encrypted in transit and at rest) | EU (primary region) |
| Resend | Transactional email (password reset, verification, notifications) | Email address, email content | United States |
| PostHog | Analytics. (1) In-app product analytics — only with explicit user consent. (2) Cookieless landing-page analytics — no cookies or client-side identifier; legitimate interest (Art. 6(1)(f) GDPR), no consent banner required (§25 TDDDG) | In-app: usage events including session/navigation telemetry (no session replay or message content; opt-in only). Landing page: a daily-rotating pseudonymous hash derived server-side from IP address and browser type — raw IP address never stored | Data hosted in the European Union (PostHog Cloud EU, Frankfurt). Operated by PostHog, Inc. (United States); any US-based access is covered by SCCs + the EU-U.S. Data Privacy Framework |
| Sentry | Error monitoring and crash reporting | Device info, anonymized error context — never message content or PII | United States |
| Cloudflare | CDN, DDoS protection, DNS, and bot-protection challenge (Turnstile) on the /cancel and /withdraw forms | IP addresses, request metadata (processed transiently) | Global (nearest edge) |
| Meta Platforms Ireland Ltd | Server-side conversion measurement (Meta Conversions API) for paid acquisition attribution — no browser tracking, no pixel | Hashed email, conversion event type, timestamp, campaign identifiers | European Union / United States |
| AppLovin Corporation | Server-side conversion measurement (AppLovin S2S) for paid acquisition attribution — no browser tracking, no SDK | Hashed email, conversion event type, timestamp, campaign identifiers | United States |
| Reddit, Inc. | Server-side conversion measurement (Reddit Conversions API) for paid acquisition attribution — no browser tracking, no pixel | Ad-click identifier (rdt_cid) from the ad link, conversion event type, timestamp |
United States |
| Google Ireland Ltd (Google Ads) | Server-side conversion measurement (offline click-conversion import) for paid acquisition attribution — no browser tracking, no tag, no cookie set by us | Ad-click identifier (gclid) from the ad link, conversion event type, timestamp — not transmitted for signups from the EEA, UK, or Switzerland; deleted at the latest 35 days after signup |
European Union / United States (SCCs + EU-U.S. Data Privacy Framework) |
| Google Workspace | Company email hosting for legal@, support@, and [email protected] inboxes | Email content and sender data received at our company inboxes | United States / European Union (Google Cloud regions) |
Independent controllers
These companies receive personal data from or about you as part of using NegotiateIt. For the activities listed here they decide for themselves how to process it and are responsible for it under their own privacy notices, so for these activities they are not our subprocessors.
| Company | Role | Data | Privacy notice |
|---|---|---|---|
| Creem (Armitage Labs OÜ, Estonia) | Merchant of record for web and Android purchases: sells you the subscription, takes payment, collects tax, issues invoices and refunds. For the limited processing it does for us under its Data Processing Agreement (keeping subscription records and sending us payment events), Creem acts as our processor. | What you enter on Creem’s checkout (name, email, billing address, country, payment details), plus your IP address. From us, Creem receives your email address and an internal account reference. We never receive or store your payment details. | creem.io/privacy |
| Google (Sign in with Google): Google Ireland Limited for users in the EEA and Switzerland, Google LLC elsewhere | Signs you in with your Google account if you choose to | Your Google account ID, email address and name, shared with us when you sign in. On our web app, Google’s sign-in button loads from Google when you open the sign-in screen, so Google receives your IP address and browser information even if you don’t use it. | policies.google.com/privacy |
| Apple (Sign in with Apple, App Store): Apple Distribution International Ltd (Ireland) for users in the EEA, UK and Switzerland, Apple Inc. elsewhere | Signs you in with your Apple Account if you choose to; processes and charges in-app subscriptions on iPhone and iPad | Sign-in: a stable user identifier Apple creates for NegotiateIt and an email address (you can choose a private relay address). Purchases: Apple processes your Apple Account and payment details; our app gives Apple a random account reference so the purchase can be matched to your NegotiateIt account, and we receive the transaction identifier, product, price, currency, and renewal and expiry status. Apple does not share your payment details with us. On our web app, Apple’s sign-in script loads from Apple, so Apple receives your IP address and browser information even if you don’t use it. | apple.com/legal/privacy |
For questions about our subprocessors or data processing, contact [email protected].