These are the service providers that process personal data on behalf of Analyse Games, either as part of the analytics service we provide to customers under the Data Processing Addendum, or for account and billing data we control under our Privacy Policy.

We tell account owners at least 30 days before adding or replacing a subprocessor, and customers can object as described in section 6 of the DPA.

Current subprocessors

Subprocessor	Purpose	Personal data	Location	Transfer mechanism
Hetzner Online GmbH (Germany), with Hetzner Finland Oy (Finland)	Servers that run the website, dashboard, ingest gateway and MCP server, and host our databases (MongoDB, ClickHouse, Redis)	All account data and player data	Germany (Nuremberg, Falkenstein) and Finland (Helsinki)	None needed: data stays in the EU
Google Cloud EMEA Limited (Ireland), with Google LLC (USA)	Google Cloud Storage: profile pictures and knowledge base pages	Profile pictures; any personal data you put in knowledge base pages	Greece	EU storage. Any access from outside the EU: EU-US Data Privacy Framework, and Standard Contractual Clauses in the Google Cloud Data Processing Addendum
Google LLC (USA)	Gemini API: the language model behind Ask Analyse	Your questions and conversation, knowledge base pages used as context, and the analytics results the assistant reads to answer, which can include player names, IDs, countries and purchase amounts	USA and other Google locations	EU-US Data Privacy Framework, and Standard Contractual Clauses
Stripe Payments Europe Limited (Ireland), with Stripe, Inc. (USA)	Payments, subscriptions, checkout, customer billing portal, tax calculation	Billing name, email and address, company name, VAT number, payment method, subscription and invoice data	EU and USA	EU-US Data Privacy Framework, and Standard Contractual Clauses
Resend (Plus Five Five, Inc., USA)	Sending emails: team invitations, email address confirmations, alerts and digests you set up	Recipient name and email address; email content, which for alerts and digests includes your game metrics	EU region (Ireland), with access from the USA	Standard Contractual Clauses in the Resend Data Processing Addendum, and the EU-US Data Privacy Framework
Upstash, Inc. (USA)	Redis for sign-in rate limiting, a short-lived session cache and MCP rate limits	IP addresses, session identifiers and basic account details cached for up to 5 minutes, token identifiers	EU region	EU storage. Any access from outside the EU: Standard Contractual Clauses in the Upstash Data Processing Addendum
ip-api.com ([email protected])	Looking up a player's country from their IP address when they join	Player IP addresses: not stored by us, held in the provider's memory for up to one minute and not logged	Not published by the provider	Not published by the provider

Services that are not our subprocessors

These services receive data in connection with Analyse Games, but they do not process it on our behalf under the DPA:

Sign-in with Google, Discord or GitHub: only if you choose it. The provider acts under its own privacy policy.
Stores and tools you connect, such as Tebex, PayNow and Discord webhooks: we exchange data with them on your instructions. You have your own agreement with them.
AI apps you connect through MCP, such as Claude (Anthropic), ChatGPT (OpenAI) or Cursor: they receive the analytics they read on your behalf, under your agreement with that provider. See AI and Your Data.
The European Commission's VIES service: checks the VAT numbers of business customers.
The Greek tax authority (AADE): receives invoice data through myDATA, as Greek law requires.
Content loaded in your browser: dashboard pages load country flags from flagcdn.com and Minecraft player heads from mc-heads.net. Your browser sends these services your IP address and, for mc-heads.net, the player's public Minecraft UUID.
Exchange rates: we fetch daily ECB exchange rates from frankfurter.app. No personal data is sent.

Changes

Date	Change
15 September 2026	First published list