We use the following third-party services:

Provider	Purpose	Data	Location
Vercel	Hosting and serving the web application	IP address, request data	EU (Frankfurt)
PostgreSQL hosting	Database operations	Encrypted account and financial data	EU (Frankfurt)
Stripe	Payment processing	Email, subscription status, payment method	EU (Ireland)
WonderBlogs	AI-powered blog content generation (admin only)	Blog topics and content (no personal user data)	EU
Vercel Blob	Storage of generated blog images	Blog featured images (no personal user data)	EU (Frankfurt)
Google (OAuth)	Optional sign-in via Google account	Name, email address, profile picture (only when you choose Google sign-in)	EU
Cloudflare (Turnstile)	Bot protection on login, registration, and password reset forms	IP address, browser challenge metadata (no cookies, no fingerprinting)	Global (Cloudflare network)

Data processing agreements pursuant to Art. 28 GDPR are in place with all processors. When you sign in with Google, Google transmits your name, email address, and profile picture to us. We do not share any of your financial data with Google. Cloudflare Turnstile is used solely for bot protection on authentication forms. It does not set cookies, does not perform browser fingerprinting, and does not track users across sites.