Subprocessors
Last updated September 22, 2026
These are the third parties we use to run Visibility Kit. It is a short list because the service does one thing, and we would rather keep it that way than grow it.
Providers that process visitor data
| Provider | What it does | Location |
|---|---|---|
| Railway Corporation | Application hosting and the PostgreSQL database where session records are stored. | United States (Atlanta, Georgia) |
| Cloudflare, Inc. | DNS, CDN, and reverse proxy. Requests to our tracking endpoints pass through it. It serves the tracking script. | United States, with global edge locations |
Providers that process account data only
This handles the site owner’s own details, never visitor records.
| Provider | What it does | Location |
|---|---|---|
| Resend | Sends transactional email: sign-in links and service notifications. | United States |
Changes to this list
We will update this page at least 30 days before a new subprocessor starts touching visitor data, so site owners have an opportunity to object. Our data processing agreement applies to every connected site automatically, so that applies to everyone.
What we do not do
- We do not sell data to anyone.
- We do not share it with advertising networks or data brokers.
- We do not use visitor data to train AI models.
Questions
To ask about any provider on this list, write to [email protected]. What we collect and keep is set out in the privacy policy, and the terms on which we process it are in the data processing agreement.