Sub-processors

What this page is

A sub-processor is a company that processes something on our behalf so that the site can work. This page names all of them. It is short, and it is short by construction rather than by omission: a site with no accounts, no database and no uploads has very little to hand anybody.

Stripe is listed here even though, for card data, it acts as a controller in its own right rather than on our behalf. Leaving it off would be technically defensible and practically misleading, so it is on the list.

The list

Each line reads: who they are, what they are for, what they can see, and where they run it.

Cloudflare — Hosting and page delivery. Sees: Request metadata, IP address. Runs: Global network.

Stripe — Taking the payment for a download. Sees: Card details, the email address you give for the receipt, billing country, and the three labels we attach. Runs: European Union and United States.

Google (Analytics 4) — Visit statistics, and only if you accept them. Sees: Pages viewed, where the visit came from, device type. Runs: European Union and United States.

What each of them actually means

Cloudflare serves every page. That means it handles the connection and logs the request — IP address, page, time — as any host or content delivery network must in order to route traffic and absorb attacks. It never sees a photograph, because a photograph is never sent.

Stripe runs the payment. You are on a page of theirs when you enter a card, and the card details go to them and not to us. Stripe holds what a payment needs: the card, the email address you give for the receipt, the billing country, and the three labels we attach — which site, what was unlocked, which language.

Google Analytics counts visits, and only after you have accepted it in the banner. Decline, and nothing is sent to Google at all: consent is denied by default before any measurement code is able to run.

Transfers outside the European Union

Stripe and Google are American companies and process data in the United States as well as in Europe. Cloudflare runs a global network and will serve you from whichever location is closest to you.

Those transfers rely on the standard contractual clauses adopted by the European Commission and on the certification of these providers under the EU-US Data Privacy Framework. Their published data processing terms are accepted as they stand.

This is a small operation, not a company with a vendor management department. Claiming that we audit these providers would not be true. What is true is that they are three of the most heavily scrutinised processors in the world, and that they are handed as little as the site can manage.

What is deliberately not on the list

No image host and no object storage, because images and generated files are never uploaded. The PDF and the PNG are built in your browser and saved by your browser.

No database of any kind. No authentication provider, because there are no accounts. No email service provider, because there is no mailing list and no transactional email — the only receipt you get comes from Stripe.

No advertising network, no tag manager, no A/B testing tool, no error tracker, no session recorder, no heat map, no support chat, no CRM and no marketing automation.

No artificial intelligence service. Nothing from this site is sent to a model, and the colour matching is arithmetic performed on your own machine.

A provider that is not named on this page is not called by this site. That sentence is the entire point of the page.

Changes to this list

If a provider is added, it appears here first, with what it sees and where it runs.

A provider that would receive personal data is a change to the privacy policy as well, and both dates would move together.

Contact

Questions, complaints, refund requests and takedown notices: hallo@pixelperlen.com. A person reads that address.

This list was last updated on 9 August 2026.