Subprocessors
To provide InboxBucket, we rely on a limited number of third-party vendors ("subprocessors") that may process personal data on our behalf. This page will be updated before we engage any new subprocessor.
Current subprocessors
| Subprocessor | Function | Data involved | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of our application servers, database, and self-hosted analytics | Account data, storage-connection credentials (encrypted), email metadata, aggregated analytics | Germany (EU) |
| Cloudflare, Inc. | Receipt of inbound email to your InboxBucket address, temporary staging of raw messages pending delivery, dispatch of our transactional email, and network services | Complete raw emails (in transit and in temporary staging), your email address for transactional mail | Global network (US-headquartered) |
| Stripe, Inc. | Payment processing for the Lifetime plan | Payment and billing details (card data is transmitted directly to Stripe and never reaches our servers) | USA / global |
Raw emails pass through Cloudflare only transiently: staged copies are deleted following successful delivery to your storage, and our own database retains headers-level metadata only. Further detail is provided in the Privacy Policy.
Your storage destination is not a subprocessor
The provider to which your backups are delivered — Google Drive, OneDrive, Dropbox, or an S3-compatible service — is selected and controlled by you, under your own account and your own agreement with that provider. We upload to it solely on your instruction; the choice of provider for your archived email rests entirely with you.
Changes to this list
When a subprocessor is added or replaced, this page and the revision date above will be updated before the change takes effect. To be notified of changes, contact [email protected].