Sub-processors
Last updated: May 30, 2026
Cookiely processes personal data on behalf of its customers (the data controllers). To deliver the service we engage the sub-processors below. Customers may rely on this list for their own records of processing (RoPA) and Article 28 GDPR obligations.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Subscription billing & payment processing | Customer billing details (name, email, payment token) | Ireland (EU); onward transfer to the US under SCCs |
| Cloud hosting provider — TO CONFIRM | Application hosting, database & file storage | All service data (consent records, site settings, DSAR requests) | Confirm region with your host (prefer EU) |
| Transactional email provider — TO CONFIRM | Verification, DSAR, and account emails | Recipient email address + email content | Confirm with your provider (prefer EU) |
We will update this page before adding or replacing a sub-processor. Questions about our processing? See our Privacy Policy.