Subprocessors
| Company | What it does | Data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosts our servers, the database and our mail server | Account data, encrypted vault items, service emails | Germany |
| Cloudflare, Inc. | Content delivery (CDN) and security for the website, the account area and the sync service, downloads of the apps, aggregate traffic statistics, the check that tells people from automated programs on the sign-in page (Cloudflare Turnstile, Turnstile Privacy Addendum) | IP address, requests, approximate location, technical and security logs; synced vault data passes through encrypted | Global network: European Union, United States and other countries |
| Stripe | Payments made on the website, invoices | Email address, billing details, card details | European Union and United States |
Independent providers
These companies are involved only if you choose them, and they act as independent controllers under their own terms, not on our behalf:
| Company | When | Privacy policy |
|---|---|---|
| Apple | When you buy a plan in the App Store, choose Sign in with Apple, or receive the notice of a new device on an Apple device (Apple Push Notification service: only the push token and the notice) | apple.com/legal/privacy |
| When you choose Sign in with Google | policies.google.com/privacy | |
| Have I Been Pwned | When you start the leaked-password check in the app | haveibeenpwned.com/Privacy |
Our own infrastructure
Sign-in codes, invitations and other service emails are sent by our own mail server, run by Zedbros Communication SL on Hetzner servers in Germany.
Changes to this list
Before we add a company that processes personal data, we update this page and its date. Questions: privacy@wardterm.com.