These are the providers that process personal data on behalf of Sporting Scouter, what they do, where they are and the safeguard used if data leaves the European Economic Area. The subprocessors authorised for Finisher Feedback are listed in Annex 2 of the Data Processing Agreement.
With your consent, on sportingscouter.com, Meta, Reddit and Microsoft also receive data, but as controllers and not as our subprocessors. They are listed in section 5A of the Privacy Policy.
Last change to this list: 2026-10-27
| Entity and purpose | Data processed | Products | Location and safeguard | Last change |
|---|---|---|---|---|
| Cloudflare, Inc. Network, CDN and firewall; bot protection (Turnstile); app hosting; database, files and queues; AI classification of comments (Workers AI); aggregate cookieless visit counting (Web Analytics) |
IP address and technical data of all visitors; public comments (without author); report and dispute files | All productsSocial DebriefFinisher Feedback | Global network EU-U.S. Data Privacy Framework |
2026-10-21 |
| DigitalOcean, LLC Application server (API) |
Data handled by the API | All productsFinisher Feedback | Frankfurt (EU) Data hosted in the EU; EU-U.S. Data Privacy Framework |
2026-10-21 |
| Supabase, Inc. Database and sign-in |
Accounts, companies, events, reviews, participants, invitations, consents | All productsFinisher Feedback | Frankfurt (EU) Data hosted in the EU |
2026-10-21 |
| Resend (Plus Five Five, Inc.) Sending emails (invitations, confirmations, notices), through Amazon SES |
Recipient email and name, email content, delivery events | Finisher FeedbackReviewsAccounts | Ireland (EU) EU-U.S. Data Privacy Framework |
2026-10-21 |
| OpenAI Ireland Ltd. Translation of reviews, responses and the analysis; notes when an organiser resolves an alert; help preparing business contacts |
Title and text of reviews and responses (without the author's name or email); public business contacts | ReviewsFinisher FeedbackBusiness contacts | EU / US Standard contractual clauses |
2026-10-21 |
| Bright Data Ltd. Collection of public comments and public event and organisation pages |
Public web content | Social DebriefBusiness contactsEvent catalogue | Israel European Commission adequacy decision |
2026-10-21 |
| Stripe Payments |
Buyer email and billing data; card data (Stripe only) | Accounts | US / EU EU-U.S. Data Privacy Framework |
2026-10-21 |
| PostHog, Inc. Usage statistics and errors, cookieless |
Pages viewed, visit source, clicks; only with consent, on sportingscouter.com and the public and sign-up pages of business | All products | EU EU-U.S. Data Privacy Framework, for anything leaving the EU |
2026-10-22 |
| Google LLC Company email; Google sign-in (if you choose it); fonts in the reviews widget |
Emails exchanged with us; Google account email and name; IP address of people who view the widget | All productsAccountsReviews widget | EU / US EU-U.S. Data Privacy Framework |
2026-10-21 |
| Google Ireland Limited (Google Analytics, Google Tag Manager) Site statistics with Google Analytics and loading of the tools with Google Tag Manager, only with consent and only on sportingscouter.com |
Pages viewed, browser identifier, device, approximate country, IP address of the request; only on sportingscouter.com | Public site (sportingscouter.com) | EU / US EU-U.S. Data Privacy Framework and standard contractual clauses |
2026-10-27 |
| Termly, Inc. Cookie banner (until replaced) |
IP address, browser data, cookie choice | All products | US EU-U.S. Data Privacy Framework |
2026-10-21 |
| Anthropic Ireland, Limited AI reading of public event pages for the event catalogue |
Public event information; at most, organisers' public contact details | Event catalogue | EU / US Standard contractual clauses |
2026-10-21 |
| Anysphere, Inc. (Cursor) Automated engineering tool that maintains the event catalogue |
Public event names, dates, places and pages, without email addresses, phone numbers or URL parameters. An event name can contain a person's name (for example, a memorial race) | Event catalogue | US No data processing agreement or signed standard contractual clauses; Anysphere's terms prohibit training AI on the content |
2026-10-23 |
| GitHub, Inc. Code hosting and change records for the event catalogue |
Public event information; at most, organisers' public contact details | Event catalogue | US EU-U.S. Data Privacy Framework |
2026-10-21 |
Changes and notice
- When we add or replace a Finisher Feedback subprocessor, we email customers at least 7 days in advance. You may object within that period; if we cannot agree, you may terminate the affected service and receive a pro-rata refund of what you paid for services not yet provided (Data Processing Agreement, §6.2).
- Every change is recorded on the Changes page.
- Questions: support@sportingscouter.com.