Wardeny uses the third-party data processors listed below to operate the service. We sign a Data Processing Agreement (DPA) with every vendor that handles personal data, relying on Standard Contractual Clauses (SCCs) for transfers to non-EU jurisdictions. We review this list at least quarterly.
Material changes to this list are announced via the in-app consent banner and by email to active accounts, with a 30-day notice window per GDPR Article 28(2).
| Vendor | Purpose | Region | Legal basis | DPA |
|---|---|---|---|---|
| Resend | Transactional email (verification, password reset, contact) | EU + US | Standard Contractual Clauses (SCCs) | view |
| Stripe Payments Europe, Ltd. | Subscription billing, payment processing, customer portal | Ireland (EU) + US | SCCs + Supplementary Measures | view |
| Sentry (Functional Software, Inc.) | Server and client error tracking (only when SENTRY_DSN is set) | US | SCCs | view |
| Plausible Analytics | Privacy-preserving site analytics (no cookies, no personal data) | EU (Germany) | Not required (no personal data processed) | view |
| GitHub, Inc. (ghcr.io container registry) | Hosting of the server container image | US | SCCs | view |
| Infomaniak Network SA | Static web hosting (FTP) and DNS for wardeny.com | Switzerland (adequacy decision under GDPR) | Not required (adequacy) | view |
| Google LLC (Firebase Cloud Messaging) | Push notification delivery to Android devices | US | SCCs + Supplementary Measures | view |
| Apple Inc. (APNs) | Push notification delivery to iOS devices | US | Apple Developer Program License Agreement | view |
How to object
You may object to the use of a subprocessor under GDPR Article 21. If the objection materially impairs our ability to deliver the service we will work with you in good faith on a solution — including, where available, account termination and data export. Email privacy@wardeny.com.