PixoProof uses the following third-party providers (“Sub-processors”) to deliver the Services. Each processes personal data only to the extent needed for the purpose listed and under a written agreement with data protection terms. This list is referenced by our Privacy Policy and Data Processing Addendum.
We give at least 14 days’ notice of a new or replaced Sub-processor by updating this page and emailing account holders.
01Infrastructure
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of the application servers and the PostgreSQL database | All account, gallery, client and activity data | Helsinki, Finland (EU) |
| Cloudflare, Inc. | Network proxy, DDoS protection and TLS for every host; R2 object storage for photo files, generated previews and encrypted database backups; edge delivery of client media | All traffic in transit; photo files and backups at rest | Global network; storage in Eastern North America (United States) |
02Billing, email and sign-in
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Stripe, Inc. | Subscription billing and payment processing for photographers | Photographer name, email, billing address, payment card (held by Stripe only), invoices | United States and EU |
| Email delivery provider (SMTP) | Sending gallery invitations, selection confirmations, download links, account and billing emails | Recipient name and email address, email content | Per provider; see our Privacy Policy for the current provider on request |
| Google LLC (Sign in with Google) | Optional sign-in for photographers | Name, email address, profile picture, Google account identifier | United States and EU |
03Monitoring
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Functional Software, Inc. (Sentry) | Application error tracking | Technical error details with identifiers and secrets scrubbed; IP address | United States |
| Grafana Labs (Grafana Cloud) | Infrastructure and application metrics and alerting | Aggregated technical metrics; no personal data by design | EU |
04Public website only, with your consent
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Google LLC (Google Analytics 4) | Website usage analytics on pixoproof.com after you accept analytics cookies | Cookie identifiers, truncated IP address, pages viewed, device and browser | United States |
| Meta Platforms, Inc. (Meta Pixel) | Advertising measurement on pixoproof.com after you accept marketing cookies | Cookie identifiers, pages viewed, device and browser | United States |
These two providers never load in the photographer application, client galleries or the mobile apps. See the Cookie Policy.
05Questions
Questions about this list: [email protected].
Version history: 1.1 (8 October 2026) first publication. The DPA had promised a list “via the PixoProof website”; this page fulfils that promise.