Sub-processor List
Source of truth: docs/legal/subprocessors.md in the Stora repository. Account owners and admins are notified by email when this list changes.
| Name | Role | Data categories processed | Region | Privacy URL | Added | Removed |
|---|---|---|---|---|---|---|
| Hetzner | Storage | WhatsApp message content (decrypted, plaintext), media, and account archive data | DE (Nuremberg/Falkenstein) | https://www.hetzner.com/legal/privacy-policy | 2026-01-01 | |
| Paddle | Billing | Payment method info, billing address, subscription status | IE / US (merchant of record) | https://www.paddle.com/legal/privacy | 2026-01-01 | |
| Resend | Recipient email address, email content (notifications, alerts) | US | https://resend.com/privacy | 2026-01-01 | ||
| Sentry | Error monitoring | Stack traces, request metadata, anonymised error context | EU (Germany — confirmed via Sentry project keys API, ingest host de.sentry.io, 2026-07-28) | https://sentry.io/privacy/ | 2026-01-01 | |
| PostHog | Analytics | Page views, feature usage events (cookieless mode, no personal data or IP stored) | EU (confirmed via deploy/nginx.conf reverse-proxy config, eu.i.posthog.com / eu-assets.i.posthog.com, 2026-07-28) | https://posthog.com/privacy | 2026-01-01 |
For questions about our sub-processors or to object to a new addition, contact privacy@storabackup.com.
See also: Data Processing Agreement — section 7 (Sub-processor Flow-Down) for your rights when sub-processors change.