Sub-processors
Last updated: 30 September 2026
These are the companies that handle personal data so 67fm can work. We only use companies that give sufficient guarantees under the GDPR, and we stay responsible for what processors do on our behalf.
1. Processors: they work on our instructions
| Company | What it does | What it receives | Where | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare | Serves the website (Workers), runs DNS, forwards email sent to contact@67fm.app, blocks attacks | IP address and request details; emails you send us, in transit | Global edge network, United States | Data Privacy Framework and Standard Contractual Clauses |
| FastAPI Cloud | Runs our server (the queue, the listener count, checkout) | Everything the server handles while it handles it; IP address in server logs | United States | Standard Contractual Clauses |
| Supabase | Hosts our database | Song, bid, display name, times, Stripe reference | European Union (Ireland) | Stored in the EU; Standard Contractual Clauses for any support access from outside it |
| Zoho | Hosts the mailbox our email is forwarded to | What you write to us and your email address | European Union | Stays in the EU |
2. Independent controllers: they also decide for themselves
Your browser connects to these companies directly, or they handle your payment under their own rules and privacy policies.
| Company | What it does | What it receives | Where | Transfer safeguard |
|---|---|---|---|---|
| Stripe | Takes payments and sends receipts; also a controller for fraud prevention and its legal duties | Email, card or payment details, billing country, amount | Ireland and the United States | Data Privacy Framework and Standard Contractual Clauses |
| Google / YouTube | Embedded player (loads after Tune in); thumbnails via our Cloudflare proxy; YouTube API Services for song lookups | After Tune in, your IP address and what the player collects; from us, only video IDs | United States | Data Privacy Framework |
Policies: Stripe Privacy Policy, Google Privacy Policy, YouTube Terms of Service.
3. Who is not on the list
No analytics, no advertising, no tracking pixels, no session recording, no chat widget, no AI service. If that ever changes, it changes here first.
4. Changes
We update this page and the Privacy Policy together whenever a company is added, removed or moves. Questions: contact@67fm.app.