Sub-processors
These companies process personal data on our behalf to run swgoh-api. Each one gets only what it needs for the job listed.
| Company | What it does for us | Data involved | Where |
|---|---|---|---|
| Google Cloud (Google LLC) | Hosting: the API, the account and authorisation services, databases, encrypted storage of game sessions, audit and request logs, and backups | All service data described in the privacy policy | United Kingdom (London); backups in Belgium |
| Cloudflare, Inc. | Network edge: DNS, TLS, firewall and DDoS protection, hosting of our websites and portals, bot checks on sign-in pages (Turnstile), and forwarding of email sent to our addresses | IP addresses, request metadata, portal sessions in transit, emails sent to us | Global edge network |
| Discord Inc. | Sign-in for players, and optionally for developers | Discord user ID and username (email only if you choose to share it) | United States |
| GitHub, Inc. | Optional sign-in for developers | GitHub user ID, username and account age | United States |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Billing for paid developer plans, when they launch | Billing contact, payment details (held by Stripe, never by us), invoices | United States and Ireland |
We do not send email from our own domain yet. Before we start (for sign-in links and security alerts), the email delivery provider we choose will be added to this list.
Not a sub-processor: the game's servers
To serve game data and, when you ask us to, act for your linked game account, we send requests to the game's own servers, which are run by the game's publisher. The publisher is not our sub-processor and is not bound by our agreements; what it does with requests to its game is covered by its own terms and privacy policy.
Changes
We update this page before a new sub-processor starts handling personal data and change the date at the top. Developers on paid plans will also be told by email, as the data processing agreement will set out.