OpenCards Sub-processors
Version 2026-10-04. A Ukrainian version is published alongside this one. If the two differ, the Ukrainian version prevails.
These are the service providers (sub-processors) that process personal data on behalf of OpenCards. Each processes data only to provide its service to us. We update this list before a new provider receives any personal data. Details are in our Privacy Policy, section 6.
| Provider | Purpose | Data categories | Location | Transfer mechanism | Date added |
|---|---|---|---|---|---|
| DigitalOcean, LLC | Hosts the server and database | Everything described in section 3 of the Privacy Policy | Frankfurt, Germany (EU) | EU data centre; DigitalOcean DPA | 2026-10-04 |
| Cloudflare, Inc. | DNS, encrypted network tunnel to our server, protection against attacks | IP address, request metadata, and the traffic passing through (encrypted in transit) | Global network; US company | EU–US Data Privacy Framework; Standard Contractual Clauses | 2026-10-04 |
| Google LLC | "Sign in with Google" | Your Google identity during sign-in | United States | EU–US Data Privacy Framework | 2026-10-04 |
Previous versions of this list remain available at /subprocessors/<date>. Questions: [email protected].