Subprocessors

Last updated: 2026-05-17.
This document is provided as a baseline. Have a qualified attorney review before public launch.

The table below lists every third party that processes personal data on our behalf, the purpose of that processing, and the region in which the processor operates. See our Privacy Policy for the full data-flow description.

Active Subprocessors

Name Purpose Data Categories Region
Stripe, Inc. Subscription billing and payment processing
  • email
  • billing identifiers
  • payment metadata
United States
tools.64bit.ca (self-hosted VPS) Application hosting and database storage
  • all application data (encrypted credentials, booking history, session metadata, audit logs)
Canada
GitHub, Inc. Source code hosting and CI/CD pipeline (no end-user data)
  • operator commits and CI logs only
United States
ntfy.sh Push notification delivery for booking confirmations and alerts
  • auto-generated topic ID
  • notification payloads (booking titles, status, timestamps)
Germany / European Union
ip-api.com IP-based geolocation for session/login security checks
  • IP address (transmitted at sign-in time)
Germany / European Union
Email delivery (operator SMTP relay) Transactional email — magic-link sign-in and account notices
  • email address
  • magic-link token
Operator-configured
Third-party booking providers CourtReserve, PodPlay/Fairgrounds, The Picklr — reservations are submitted to these platforms on the user's behalf using user-provided credentials
  • provider login credentials (decrypted only in-memory at booking time)
  • booking parameters
United States

Frontend Dependencies

The following components run inside your browser. They are listed here for transparency even though they are not subprocessors in the GDPR sense — they do not transfer personal data to a third party on our behalf.

Component Purpose Delivery
FingerprintJS (open source build) First-party device fingerprint computed in the browser; only the resulting visitor ID and a small JSON of public traits are sent to our own server. Self-hosted (no third-party CDN request).
Font Awesome / Google Fonts CDN Icon and font assets used by the dashboard UI. Loaded from the public CDN at page render time.

Changes to This List

When we add, remove, or replace a subprocessor we will update this page and bump the Privacy Policy version. Material changes are announced by email and prompt a re-acknowledgement at the next privileged action.