Subprocessors
The third parties that handle data on our behalf, what each one does, and where.
Last updated 5 August 2026
In use today
| Provider | What it does | Data | Where |
|---|---|---|---|
| Supabase | Database, authentication and file storage | Account details, gameplay records, guesses, ratings | United States |
| Vercel | Website hosting, content delivery, and cookieless audience measurement | Request logs, IP address, approximate country; page views and load speed, with nothing stored on your device | United States, with global edge locations |
| Sign-in with Google | Email address, name and profile picture, at sign-in | United States | |
| Resend | Streak reminder emails to players who have asked for them, and sponsorship correspondence to business contacts | Email address and player name for opted-in players; name, email and company for sponsorship applicants | United States |
Contracted but not yet in use
These are set up but process no personal data of yours at present. We will move them to the list above, and update the date on this page, before they start.
Resend does deliver operational alerts to us — for example when the puzzle schedule is running low. Those messages go to our own address and contain no information about players, which is why it is listed here rather than above.
| Provider | What it does | Data | Where |
|---|---|---|---|
| Google (AdSense and Privacy & messaging) | One advertisement on the result screen, and the consent banner | IP address, advertising cookies and identifiers, your consent choice | United States |
Where the data is
We are based in the United States, and every provider above stores and processes data there. We hold a data processing agreement with each of them: they act only on our instructions, may not use what they hold for their own purposes, and are required to protect it.
Changes
We update this page when a service is added or removed, not at audit time. If you want to be told when it changes, email privacy@brandoozle.co.
What we collect and why is set out in our privacy policy.