Legal

Four documents, versioned and dated. Each is downloadable as a PDF and each states what changed from the previous version.

Sub-processor list

Last updated 2 April 2026. This is the current list of sub-processors that may process personal data on your behalf. Changes are notified 30 days before they take effect.

Hetzner Cloud provides compute and storage in Germany and Finland. Stripe handles payment processing in the United States. Resend sends transactional email from the United States. GlitchTip runs error reporting, self-hosted in the same region as compute.

Each named processor's DPA is included in the security pack. The categorised summary, with jurisdictions, is published on the security and trust page.

Versions

DOCUMENTVERSIONUPDATEDDownload
Privacy policyv42026-03-12Download
Terms of servicev32026-01-08Download
Data processing agreement (DPA)v22025-11-20Download
Sub-processor listv72026-04-02Download