Sub-processors
Review the service providers CookiePal uses to help provide, secure, and support our services.
CookiePal sub-processors
Last updated: 14 July 2026
| Name | Purpose | Region | Data Scope |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure for hosting the Cookiepal platform, APIs, storage, authentication, queues, jobs, and email delivery. | European Union (eu-central-1), with additional vendor-managed transfer and backup terms subject to AWS contractual documentation. | Customer account data, consent records, domain and site settings, operational notification payloads, website form submissions, and related service metadata. |
| Stripe | Payment processing, subscription billing, invoicing, checkout, and related billing lifecycle operations. | Vendor-managed global infrastructure; applicable regional and transfer terms depend on the Stripe account and contract configuration. | Billing contact data, customer identifiers, subscription identifiers, invoice and payment metadata, and related account billing information. |
| Shopify | Shopify app integration, merchant onboarding, compliance webhook handling, and store-related banner processing flows. | Vendor-managed global infrastructure; exact data residency depends on Shopify terms and service configuration. | Merchant account and store data, app installation and session data, webhook payloads, and store-domain linkage information. |
| Nuvemshop / Tiendanube | Store integration, OAuth installation flow, webhook ingestion, merchant support flows, and related side-effect processing. | Vendor-managed infrastructure; Cookiepal-side supporting processing runs in AWS EU, while Nuvemshop or Tiendanube contractual hosting terms should be reviewed separately. | Merchant and store owner data, installation payloads, webhook event data, store-domain linkage information, and related support and operational metadata. |
| Google Cloud / Google Workspace | Service-account based spreadsheet generation, internal reporting, and supporting platform services used by Cookiepal. | Vendor-managed infrastructure; exact regional and transfer terms depend on the Google service and account configuration. | Internal reporting exports that may include customer, domain, billing, store, and operational reporting data. |
| Mixpanel | Product analytics, event tracking, and usage measurement for the Cookiepal web application. | EU ingestion endpoint is configured by Cookiepal; broader storage and transfer terms remain subject to Mixpanel contractual documentation. | User and account identifiers, domain identifiers, event properties, session analytics, and related usage metrics. |
| Sentry | Error monitoring, logging, and observability across the website, web application, backend functions, and jobs. | Vendor-managed infrastructure; exact storage region, retention, and transfer terms depend on Sentry account configuration. | Error payloads, request metadata, URLs, device and browser information, user identifiers, and related diagnostic information. |
| Slack | Operational communications, lead notifications, support alerts, and internal workflow messaging. | Vendor-managed infrastructure; exact workspace region and transfer terms depend on Slack account configuration. | Email addresses, contact form details, support and operational alerts, domain and account references, and related message content. |
| JotForm | Live chat and conversational support interactions used by Cookiepal. | Vendor-managed infrastructure; exact storage region and transfer terms depend on JotForm account configuration. | Support chat content, contact details shared in chat, and related conversation metadata. |
| OpenAI | AI-assisted cookie and script categorization, translation, and related internal automation workflows. | Vendor-managed infrastructure; exact regional processing and transfer terms depend on account and contractual configuration. | Cookie names and values, script URLs, domain context, and other workflow input data required for classification and translation tasks. |
Subscribe to updates
Enter your email to request notifications about future sub-processor changes.