Subprocessors
These are the third parties that may receive personal data when you use Enchant.ee. Groups marked only with your consent or only when you connect them receive nothing until you opt in. We post material additions here before they take effect.
Last updated August 23, 2026.
Running the service
Always active — the platform cannot be delivered without these.
Vercel
- Does:
- Hosting, CDN, serverless functions, custom domains
- Receives:
- All requests, IP addresses, user agents
- Where:
- USA / global edge
Neon
- Does:
- Postgres database
- Receives:
- All account and content data
- Where:
- USA / EU region
Cloudflare R2
- Does:
- Storage and delivery of uploaded media
- Receives:
- Images, video, audio you upload
- Where:
- Global
Upstash
- Does:
- Rate limiting and abuse prevention
- Receives:
- IP addresses and user IDs as short-lived counter keys
- Where:
- USA / EU region
Better Auth
- Does:
- Authentication and session management
- Receives:
- Credentials, session metadata
- Where:
- USA
Payments and payouts
Only when you subscribe, buy something, or request a creator payout.
Lemon Squeezy
- Does:
- Subscriptions and marketplace checkout, as merchant of record
- Receives:
- Billing identity, purchase records. We never receive your card number.
- Where:
- USA
PayPal
- Does:
- Creator payouts
- Receives:
- PayPal email address, payout amounts
- Where:
- USA / global
Communication
Only when the service needs to email you.
Resend
- Does:
- Transactional email and one-time codes
- Receives:
- Email address, message contents
- Where:
- USA
Google, Apple and Mozilla push services
- Does:
- Delivering push notifications you opted into
- Receives:
- Push endpoint and keys
- Where:
- Global
Safety and abuse prevention
Always active — these protect creators and their audiences.
Cloudflare Turnstile
- Does:
- Bot challenge on the signup form
- Receives:
- IP address, browser signals
- Where:
- Global
Vercel BotID
- Does:
- Bot detection on AI endpoints
- Receives:
- Client signals
- Where:
- USA
OpenAI
- Does:
- Automated image moderation before an upload is published
- Receives:
- The image being checked
- Where:
- USA
AI features
Only when you use an AI feature.
Vercel AI Gateway
- Does:
- Routing prompts to AI models
- Receives:
- Your prompt and any text or file you supply, including bio text and uploaded PDFs
- Where:
- USA
Measurement — only with your consent
None of these load unless you accept measurement. See the Cookies page.
Vercel Analytics
- Does:
- Page view statistics
- Receives:
- Page views, referrer, coarse device information
- Where:
- USA
Vercel Speed Insights
- Does:
- Real-world performance timings
- Receives:
- Loading and interaction timings, device information
- Where:
- USA
Sentry
- Does:
- Error and crash diagnostics
- Receives:
- Stack traces, the URL where the error happened, browser version
- Where:
- USA / EU region
Content you choose to bring in
Only after you connect an account or add the matching widget. Disconnecting stops it.
Google (sign-in)
- Does:
- OAuth sign-in
- Receives:
- Name, email address, profile picture
- Where:
- Global
KLIPY
- Does:
- GIF and sticker search
- Receives:
- Your search term and IP address. Nothing about your account.
- Where:
- Global
TikTok, Instagram / Meta
- Does:
- Connected-account widgets
- Receives:
- OAuth tokens, profile and post data
- Where:
- Global
YouTube / Google APIs, Twitch, Reddit, Telegram, GitHub, Bluesky, Mastodon, Discord
- Does:
- Public profile and stats widgets
- Receives:
- The handle you enter and the public stats returned
- Where:
- Global
Spotify, SoundCloud, Apple, Goodreads, Letterboxd
- Does:
- Music, book and film widgets
- Receives:
- The link or handle you supply
- Where:
- Global
Questions about any provider here? Email support@enchant.ee. See also the cookies page.