Legal

Sub-processors

Draft, pending legal review. Version 2026-11-01.

These companies process personal data for Anchr.ing. We announce changes here and by email to project owners at least 30 days in advance (DPA, section 6).

CompanyWhat they doDataWhereHetzner Online GmbHServers, storage and backups for the whole serviceAll service dataEU (Germany, Finland)Brevo (Sendinblue SAS), Paris, FranceSends sign-in codes, links, invites, security notices and support message notifications; receives replies to support messages; reports bounces and spam complaintsEmail address, message content (including one-time codes and replies to support messages)EU (France)Adyen N.V., Amsterdam, NetherlandsCard and SEPA Direct Debit payments for Anchr.ing's own billing (only dashboard accounts that pay for a plan)Name, email address, billing address, card or bank account details, payment history; IP address and device data on its payment pageEU (Netherlands)

Not sub-processors for your users' data

Cloudflare, Inc.: DNS for anchr.ing only. Traffic to the service does not pass through Cloudflare (DNS only, no proxy), so it does not see your users' data.
Let's Encrypt (ISRG): issues the TLS certificates; it learns the host names, nothing else.
A customer that charges its own users with the billing features connects its own Adyen account. That Adyen account works for the customer, under the customer's agreement with Adyen; it is not a sub-processor of ours.
Our own analytics (Rybbit), run by Simon ApS on our own server at Hetzner in the EU, not by a third party: it measures the public marketing site. It sees visits to the public pages only, never the dashboard, the sign-in pages or your users' data.