Sub-processors
Last updated: 27 August 2026
When you use WireBoard Analytics on your website, WireBoard acts as a data processor on your behalf: we process data about your website's visitors according to your configuration. To provide the service, we rely on a small number of infrastructure providers ("sub-processors"). This page lists them, what they do for us, and what data they can come into contact with.
We are transparent by design: the list below is complete, and we only engage sub-processors bound by GDPR-compliant data processing agreements.
Sub-processors that may process visitor data
These providers form the infrastructure through which data about your website's visitors flows.
| Sub-processor | Entity & location | Purpose | Data involved | Processing location |
|---|---|---|---|---|
| Hetzner | Hetzner Online GmbH, Germany (EU) | Hosting of the WireBoard application, data ingestion (collector), and analytics databases | All analytics data (anonymized at collection — see our Privacy Policy) | Germany / Finland (EU) |
| bunny.net | BunnyWay, informacijske storitve d.o.o., Slovenia (EU) | Content delivery network for the WireBoard tracking script (static.wireboard.io). Sets no cookies. |
Transient connection data only (IP address, user agent), held in memory for seconds during delivery; no logs retained | Global edge network (EU-headquartered; EU-only routing available) |
| DigitalOcean | DigitalOcean, LLC (USA), EU datacenter regions | Object storage and delivery of application assets, report exports, and encrypted backups | Files generated by or for WireBoard account holders (e.g. report exports); no visitor tracking data | Frankfurt / Amsterdam (EU) |
Service providers for account data
These providers process data about WireBoard account holders (our customers), not about your website's visitors.
| Provider | Entity & location | Purpose | Data involved |
|---|---|---|---|
| Paddle | Paddle.com Market Ltd, United Kingdom | Billing and payments (acting as merchant of record) | Name, email, billing details of account holders |
| Mailgun | Mailgun Technologies, Inc. (a Sinch company), USA | Transactional email (reports, alerts, account messages) | Email address and message content of account holders. Transfers to the USA are safeguarded under the EU-U.S. Data Privacy Framework and standard contractual clauses. |
| Infomaniak | Infomaniak Network SA, Switzerland | Encrypted off-site backups (including database backups) and newsletter delivery | Account data contained in backups; email addresses of newsletter subscribers. Switzerland benefits from an EU adequacy decision. |
| Cloudflare | Cloudflare, Inc., USA | Bot protection (Turnstile) on our registration, contact, and newsletter forms; delivery edge for report exports | Connection data (IP address, browser signals) of people using those forms; report export downloads by account holders. Transfers to the USA are safeguarded under the EU-U.S. Data Privacy Framework. |
Changes to this list
When we add or replace a sub-processor, we will update this page and announce the change in advance — at least 14 days before the new sub-processor processes any data — via the product changelog and email to account owners. If you have a reasonable, data-protection-related objection, contact us before the change takes effect.
Questions
For questions about our sub-processors or to request our data processing agreement, contact info@wireboard.io.