Subprocessors
Last updated: August 10, 2026
A subprocessor is a third-party provider that processes data on behalf of CookieHug to the extent necessary to deliver the service. This list is kept up to date.
| Provider | Purpose | Data scope | Location |
|---|---|---|---|
| OVH | Application and database hosting | All platform data | Warsaw, Poland (EU) |
| Cloudflare | CDN, proxy, TLS, geolocation headers | Transit of all traffic | Global network (EU entry) |
| Stripe | Payments and subscriptions | Billing data | EU/US |
| dpoczta.pl | Transactional e-mail (login codes, password resets, alerts, reports) | E-mail addresses and message content | Poland |
| Google (reCAPTCHA v3) | Anti-bot protection for forms | Browser signals | EU/US |
| Google / Facebook / Apple | Optional social login | Account identifier, e-mail address | EU/US |
| Google (Gemini API) | Generating cookie descriptions | Cookie names and domains only (no personal data) | EU/US |
| wordpress.org | Checking WordPress version freshness | Plugin identifiers only (no personal data) | US |
Transfers outside the EEA rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses (SCCs), depending on the provider.
We announce changes to this list on this page 14 days in advance, in line with the Data Processing Agreement (DPA).
Last updated: August 10, 2026