Legal
LeakBrief subprocessors
The providers that host, secure and deliver LeakBrief: Cloudflare, Neon, Upstash, Resend and Google sign-in, with what each one does and where it runs.
Which providers process personal data for LeakBrief?
The providers below host, secure and deliver LeakBrief; each one processes data only to provide its service to us.
| Provider | Service | Location | Data |
|---|---|---|---|
| Cloudflare, Inc. | Hosting on Workers and its network, the store crawler on Containers, file storage in R2, Turnstile checks on public forms, and Email Routing for our mailboxes | Global network; the crawler and R2 storage in the EU jurisdiction | Every request to the site, stored files such as logos and PDFs, form checks, and email sent to our addresses |
| Neon | The Postgres database | EU, Frankfurt (AWS eu-central-1) | Accounts, sessions, briefs, opt-out requests and quota counters |
| Upstash, Inc. | Rate limiting | EU, Frankfurt (eu-central-1) | Short-lived request counters keyed by IP address, a hash of it or an account id |
| Resend, Inc. | Transactional email: sign-in links and opt-out confirmations | United States | Recipient email address and message content |
| Google LLC | Sign-in with Google, only when a user chooses "Continue with Google" | United States | Name, email address and profile image |
| Stripe | Payments, from the launch of paid plans | Not in use yet | Business details, billing address, VAT number and payment records |
How will I know when this list changes?
We update this page before a new provider starts processing personal data for LeakBrief.