Sub-processors
Last updated: 2026-04-22
Per GDPR Article 28, the following third parties may process personal data on our behalf. We only share the minimum data needed for each purpose.
| Name | Purpose | Location | DPA |
|---|---|---|---|
| Hetzner Online GmbH | Hosting, servers in Germany (Falkenstein, Nuremberg). | Germany (EU) | link |
| Stripe Payments Europe, Ltd. | Card payments, subscription billing. | Ireland (EU) + US transfers under SCC | link |
| Resend (Plus One Labs, Inc.) | Transactional email delivery. | US transfers under SCC | link |
| OpenRouter, Inc. | Default LLM gateway for platform-pool inference. | US transfers under SCC | link |
| Individual LLM providers (BYOK) | When you bring your own API key, your chosen provider (OpenAI, Anthropic, Google, xAI, etc.) processes your prompts directly. Their privacy policies apply. | Varies; typically US | Provider-specific |
| Google LLC | reCAPTCHA anti-automation on auth forms (loaded only after functional-cookie consent). | US transfers under SCC | link |
| Let's Encrypt (ISRG) | TLS certificate issuance. | US (no personal data transferred) | N/A |
We notify customers of new sub-processors at least 30 days before they start processing personal data. Email privacy@fightclub.pro to subscribe to sub-processor change notifications.