Subprocessors
Third-party providers that process data on our behalf.
| PROVIDER | PURPOSE | DATA | LOCATION | TRANSFER | STATUS | UPDATED |
|---|---|---|---|---|---|---|
| Google (Gemini image models) | AI image generation | Uploaded images, generated assets | To be documented | To be documented | In use — preview | 28 July 2026 |
| Stripe | Payments, subscriptions and billing portal | Billing and transaction data | To be documented | To be documented | In use — preview | 28 July 2026 |
| Self-hosted object storage (MinIO) | Private storage of uploaded and generated images | Uploaded images, generated assets | Our own infrastructure | No third-party transfer | Self-hosted — not a third party | 28 July 2026 |
| Self-hosted authentication (Auth.js) | Sign-in and account security, with optional Google Sign-In | Account data | Our own infrastructure | No third-party transfer unless Google Sign-In is enabled | Self-hosted — Google Sign-In available as an option | 28 July 2026 |
| Email provider | Transactional email | Email address, message content | Pending | Pending | Pending selection | Pending |
| Analytics provider | Usage measurement, with consent | Usage data | Not applicable | Not applicable | None used today | 28 July 2026 |
About this list
Providers already used by the service are named above. A row still marked as pending is a category for which no provider has been selected and to which nothing is sent today.
Image generation runs on Google. When image generation is enabled, the images you upload — including photographs of real people — and the assets generated from them are sent to Google for processing. Google is the only image-generation provider this service supports.
Payments run on Stripe, using its hosted checkout and billing portal. Card details are entered on pages operated by Stripe and never reach our servers.
Uploaded and generated images are stored on S3-compatible object storage that we operate ourselves (MinIO). No third-party storage provider receives them. Sign-in and accounts are handled by our own servers; Google Sign-In is an optional provider that stays off unless it is configured.
No analytics or marketing tracker is loaded today, which is why that row names no provider.
What is still missing
The processing location and the applicable transfer mechanism are not yet documented for the named providers. Those cells state that openly rather than implying that nothing is transferred, and they must be completed before launch.
Keeping it current
This page must be updated whenever a provider is added, replaced or removed. The date above records the last change to this list.