← Back to legal
Subprocessors
GDPR Art. 30 - Subprocessor list
We share specific data with vetted third-party subprocessors to deliver the Glowniq service. Each subprocessor is bound by a Data Processing Agreement (DPA) and operates under documented safeguards.
Last updated: 31 July 2026
Infrastructure
| Subprocessor | Data | Location | Safeguard |
|---|---|---|---|
| Cloudflare | IP address, request metadata | Global (EU/US) | DPA pending, SCC |
| CookieYes | cookie preferences, IP address | United States / EU | DPA pending, SCC |
| Firebase (Google) | push token, crash data, app instance ID | United States | DPA pending, SCC |
| Hetzner Online | account data, analysis history, usage logs | Germany (EU) | DPA, Adequacy (EU) |
| MinIO | analysis input (face image) | Germany (EU, self-hosted on Hetzner) | DPA, Adequacy (EU) |
| Sentry (GlitchTip) | error logs, performance metrics, IP address | Germany (self-hosted) | DPA, Adequacy (EU) |
AI vision
| Subprocessor | Data | Location | Safeguard |
|---|---|---|---|
| Anthropic | analysis input (face image), analysis output | United States | DPA pending, SCC |
| EachLabs | analysis input | United States | DPA pending, SCC |
| Groq | analysis input (face image), analysis output | United States | DPA pending, SCC |
| OpenAI | analysis input (face image), analysis output | United States | DPA pending, SCC |
| OpenRouter | analysis input (face image), analysis output | United States / EU (model-dependent) | DPA pending, SCC |
Payments
| Subprocessor | Data | Location | Safeguard |
|---|---|---|---|
| RevenueCat | purchase history, subscription state, app user ID | United States | DPA pending, SCC (DPF) |
| Stripe | payment metadata, billing email | United States / EU | DPA pending, SCC |
Authentication
| Subprocessor | Data | Location | Safeguard |
|---|---|---|---|
| Apple (Sign-In) | email, name | United States | DPA, SCC |
| Google (Sign-In) | email, name, OAuth profile | United States | DPA, SCC |
| Logto | email, session token | EU / Asia | DPA pending, SCC |
Cookie policy
We use CookieYes to manage consent for non-essential cookies. Marketing and analytics cookies are off by default until you opt in.