Sub-processor List
Last updated 21 July 2026
These are the material third parties that help us run ProCafe. Most act as processors; where a provider also acts as a joint or independent controller, that role is stated explicitly. For each one we record the name, purpose, location and — where outside the UK/EEA — the transfer safeguard.
| Provider / recipient | Purpose | Region | Transfer mechanism |
|---|---|---|---|
| Hetzner Online GmbH | Cloud hosting (application + database) | Germany (EEA) | Within EEA — no additional transfer mechanism needed |
| Stripe Payments Europe, Ltd. (with Stripe, Inc.) | Subscription billing & card payment processing. Card details are entered directly with Stripe — ProCafe never receives or stores full card numbers. | Ireland (EEA), with Stripe, Inc. (United States) | EU Standard Contractual Clauses for any US transfer, per Stripe's DPA |
| Resend, Inc. | Transactional account email: verification and password reset | United States (provider) | Contractual transfer safeguards under provider terms |
| Google Ireland Limited (Google Analytics) | Website analytics on our PUBLIC pages only (marketing, help, legal, security) to understand visits and traffic. Not loaded in the signed-in app or the internal admin area. | Ireland (EEA), with Google LLC (United States) | EU Standard Contractual Clauses for any US transfer, per Google's terms |
| Meta Platforms Ireland Limited (with Meta Platforms, Inc.) | Consent-gated advertising measurement through Meta Pixel and Conversions API; never receives ProCafe operational records. Meta is a processor for specified matching/measurement services, a joint controller for specified collection and transmission used for ad targeting/optimization, and an independent controller for its later processing, under the Meta Business Tools Terms. | Ireland (EEA), with Meta Platforms, Inc. (United States) | Meta UK Data Transfer Addendum / applicable contractual safeguards under the Meta Business Tools Terms |
| Functional Software, Inc. (Sentry) | Error monitoring: server error reports (error type, message, stack trace, route pattern). Configured to exclude request bodies, headers and personal data. | United States (EU data residency available) | EU Standard Contractual Clauses, per Sentry's DPA |
Changes
We give advance notice before adding or changing a processor covered by the Data Processing Agreement. Where that agreement provides it, a customer who reasonably objects can raise it and, failing resolution, terminate. Controller recipients are disclosed here and in the Privacy and Cookie Policies.