SUB-PROCESSORS
Last Updated: April 25, 2026
This page lists the third-party services Three Sevens Creative LLC uses to operate its products. Each is a data processor under GDPR Art. 28 and is contractually bound to process personal data only on our instructions. Active payment processor depends on checkout configuration; see Privacy Policy for the full data-handling disclosure.
| Processor | Purpose | Data | Location |
|---|---|---|---|
| Paddle | Payments and merchant-of-record (primary) | Email, name, billing address, payment method, order history | EU / US (global) |
| Stripe | Payments (alternate provider) | Email, name, billing address, payment method, order history | US / EU |
| Polar | Subscriptions (alternate provider) | Email, subscription status, customer ID | US / EU |
| Resend | Transactional and account email delivery | Email address, message metadata, delivery logs | US (AWS) |
| Umami (self-hosted) | Cookieless analytics | Page paths, referrer, browser/device metadata; sensitive query parameters stripped before send | Self-hosted on our infrastructure |
| Sentry / Firefly | Error and crash diagnostics | Stack traces, breadcrumbs, browser context, user ID and email when an error fires for a signed-in user (PII-scrubbed before send) | US / EU |
| Hetzner (dedicated VPS) | Application hosting and database | All operational data, encrypted at rest | EU |
| Cloudflare | CDN, DNS, and DDoS protection | Request logs, IP addresses (truncated before persistence), user agents | Global edge |
Changes
We will update this page when we add, remove, or replace a sub-processor. Material changes are also reflected in the Privacy Policy.
Contact
Questions about a specific processor or our data-processing arrangements: privacy@threesevenscreative.com