Subprocessors
Everyone who touches Simplytics data, what each one gets, and where they sit. Two lists, because the distinction is real and most pages of this kind blur it.
Subprocessors
Companies that process data on our instruction. These are the ones a data-processing agreement is actually about.
| Company | What it does | What it gets | Where |
|---|---|---|---|
| Cloudflare | Hosting, the database, and the edge that serves every page and beacon | Everything — the analytics aggregates, account emails, and the raw visit rows for the hours before they are deleted | Database primary in the EU (Warsaw); requests served from the nearest edge location worldwide |
| Dodo Payments | Merchant of record for subscriptions | Your billing email and payment details. We never see card numbers | Per their own terms |
| Resend | Sends every email: the weekly digest, spike alerts, onboarding and billing notices, and sign-in links | Your email address and the contents of those messages. Never any visitor data | Delivery is handled through Amazon SES in eu-west-1 (Ireland) |
Scroll the table sideways to see the last two columns.
Not subprocessors, but you should still know
Two companies your browser contacts directly when you open your own dashboard. They never receive anything on our instruction, and neither is ever contacted from a site you track — so calling them subprocessors would be wrong, and leaving them out would be worse.
- DuckDuckGo — your browser fetches a favicon from
icons.duckduckgo.comfor each referring site in your Top Sources list. That request tells DuckDuckGo the referring hostname and your IP address. - jsDelivr — serves the charting library the dashboard draws with, pinned to an exact version and checked against a hash. Loading it tells jsDelivr your IP address.
What is deliberately absent
No advertising network, no data broker, no session-recording tool, no third-party analytics on our own analytics, and no AI vendor. A visitor to a site you track is never in contact with anything except Cloudflare's edge.
Changes
Adding a subprocessor is a change to this page and to /privacy, and it is listed on the changelog. If you have a subscription and want to be told in advance, email nikhil@simplytics.dev and you will be.