Sub-processors.

Stripe, Inc.: payment processing. Purpose: billing your subscription in USD and handling refunds. Processes billing identifiers and payment data. May process data in the United States. Privacy: stripe.com/privacy.

Cloudflare, Inc.: content delivery network, DDoS protection, and the upstream resolver our DNS service forwards to. Purpose: delivering and protecting the Service, and resolving the domain names your devices ask us about; processes technical connection data and those domain names. Your IP address is not forwarded and EDNS Client Subnet is switched off, so the lookups arrive as our resolver's traffic. May process data in the United States.

Hostinger International Ltd.: managed VPS hosting and DNS infrastructure. Purpose: running the resolver and application servers and processing DNS query metadata. May process data in the United States / EU.

Hetzner Online GmbH: server hosting in Germany. Purpose: running the additional filtering resolvers that back our Mind Modes profiles, and hosting the server on which we ourselves operate the store that holds encrypted log archives. Processes DNS query metadata in transit. The archive objects are ciphertext: they are encrypted in the customer's browser under a passphrase we never receive, so neither we nor Hetzner can read their contents.

Neon, Inc.: managed PostgreSQL database. Purpose: storing account, profile, device and (where you have enabled logging) query-log data. May process data in the United States / EU.

Microsoft Corporation (Microsoft Clarity): marketing-site analytics. Purpose: session replays and heatmaps on our public marketing pages to understand and improve usage. May process data in the United States.

Vercel, Inc.: application hosting. Purpose: hosting and serving the web application and marketing pages. May process data in the United States.

Google LLC (Gemini API): composing answers in the two Guardino assistants. Purpose: turning a question you type, together with excerpts from our own help and guide text, into an answer. Ask Guardino sits on our public marketing pages; the help assistant sits inside the signed-in dashboard and explains what each control does. Both send Google the same two things and nothing else: the question you typed and excerpts from text we have written and published. Neither sends an account identifier, an email address, a profile, a device, a DNS query or any log data, and the dashboard assistant is not given access to your settings, which is why it can describe a control but cannot tell you how you have configured it. We do not store the questions. May process data in the United States.

Several sub-processors are located in the United States or operate global infrastructure there. Where personal data leaves the EEA, the UK or Türkiye, we rely on appropriate safeguards such as Standard Contractual Clauses or, where applicable, your explicit consent.

Business customers who act as data controllers can request a Data Processing Agreement under Article 28 of the GDPR. Contact support@guardino.ai to put one in place.

We keep this list current. Where a change to our sub-processors is material, we will update this page and, where required, give affected parties notice.

Questions: support@guardino.ai.