Legal
Sub-processors
Every company that processes personal data for remempass.org and the Remem sync service. We will update this page before adding anyone.
Effective 21 October 2026 · Version 2026-10-21
Draft pending legal review.
Processors
| Who | What they do for us | Where data is stored | Safeguards |
|---|---|---|---|
| Cloudflare, Inc. (USA) and Cloudflare group companies | Hosting the website and sync service (Workers); the database (D1); file storage (R2); sync coordination (Durable Objects); sending email (Email Service); forwarding mail sent to our addresses (Email Routing); bot protection (Turnstile); DNS and the content delivery network | D1, R2 and Durable Objects under Cloudflare's EU jurisdiction. Requests are handled at the nearest Cloudflare location, which can be outside the EU. | Data Processing Addendum with the EU Standard Contractual Clauses; EU-U.S. Data Privacy Framework certification. Cloudflare's own sub-processors: list. |
| The operator's email provider | Receives mail that Cloudflare Email Routing forwards from hello@remempass.org, privacy@remempass.org and security@remempass.org | To be stated by the operator | To be stated by the operator |
Not processors
Namecheap, Inc. is the registrar for the remempass.org domain. It processes no data about our users. The domain's name servers and records are run by Cloudflare.
Changes
We will add a provider here before it starts processing your data. If you have agreed to product emails, we will also tell you by email before a new provider handles them. Cloudflare's general privacy policy is here.