Subprocessors
Last updated 12 November 2026. Takes effect when the service opens to customers.
These are the outside companies that handle personal data for us. Where we have not chosen a provider yet, the row names the kind of provider. We will name each one here before we use it for customer data.
| Provider | Used for | Data |
|---|---|---|
| Cloudflare | Serving and protecting this website | Website request data, including IP address |
| Stripe | Card payments, saved cards, refunds and dispute handling | Card details (entered with Stripe, never on our servers), billing name and address, email, amounts |
| Transactional email provider | Sending our emails to you: receipts, reminders, security alerts | Recipient address, subject, text |
| Infrastructure and hosting providers | Running the control plane and the host machines your servers run on | Everything listed in the table above |
| Object storage for backups | Storing encrypted backups, and an encrypted off-site copy where that is switched on | Encrypted copies of your disks and game data |
Sources your servers fetch from
Marketplace apps and game templates make your server download software from public sources, for example Docker's package repository, WordPress.org and Mojang's download servers. Those requests come from your server, not from us, and we send them no personal data.
Changes
When we add or replace a subprocessor that handles your servers' contents, we email the account's owners at least 30 days before, and you can object by closing the account.