Sub-processors
Effective 12 October 2026
In force from 12 October 2026. Last revised 12 October 2026.
Sub-processors
These companies process personal data on our behalf to run PagesPrinter. For site owners they are the sub-processors under our data processing agreement. Each is bound by a written agreement with data protection terms at least as protective as ours.
| Sub-processor | What it does for PagesPrinter | Personal data involved | Where |
|---|---|---|---|
| Scaleway SAS (France) | Runs our servers (Kubernetes), the PostgreSQL database, file storage for sites and uploads, the job queues, the in-memory store for rate limits, the container registry, and sends our email (Transactional Email) | All data described in our privacy policy, including site owners' visitors' data | Amsterdam, the Netherlands (region nl-ams) |
| Cloudflare, Inc. (United States) | DNS, TLS certificates, the network in front of previews and connected domains (including custom hostnames for site owners' domains), and protection against attacks | IP addresses and request details of everyone who visits a hosted site or our API; page content in transit | Global network. Transfers under the EU-US Data Privacy Framework or standard contractual clauses |
| Google LLC (United States), Web Risk API | Checks outside links in forms and guides, and the pages of a newly connected domain, against Google's lists of malware and phishing addresses | Web addresses (URLs). These normally carry no personal data, but an address chosen by a site owner can | United States. Transfers under the EU-US Data Privacy Framework or standard contractual clauses |
| Stripe Payments Europe, Ltd. (Ireland) | Takes payment for PagesPrinter's own plans, when plans are paid | Account holders' billing details and payment data | European Union, with transfers to Stripe, Inc. in the United States under Stripe's own transfer terms |
Services site owners contract directly
- Stripe, for your sales. When you sell through your site, payments run in your own Stripe account under your own agreement with Stripe. Stripe is your service provider, not our sub-processor. PagesPrinter reads and writes the records it needs (prices, checkouts, payments, refunds, subscriptions) in your account through Stripe Connect, on your instructions.
- Videos you embed. If a course or page embeds a video from Vimeo, YouTube (through its privacy-enhanced youtube-nocookie.com player) or Bunny, the visitor's browser loads it from that provider. Which provider you embed is your choice and your responsibility.
- Your domain registrar and DNS provider, if your domain's DNS is not with Cloudflare.
Services that don't process personal data
- Malware scanning runs on ClamAV inside our own cluster. Files are not sent to anyone. The scanner downloads virus signatures from Cisco Talos; nothing is sent the other way.
- Google Fonts. When you choose a Google font, our servers download it once and serve it from your site. Your visitors' browsers never contact Google for it.
- Brand import. When you ask us to import a brand from a web address, our servers fetch that page. No visitor data is involved.
- GitLab, where our source code and build pipelines live, holds no customer data.
Changes
We give site owners at least 30 days' notice before we add or replace a sub-processor, by updating this page and emailing team Owners. You can object, as described in the data processing agreement.
[Optional: an address where site owners can subscribe to changes to this page.]