# Subprocessors

> The providers TrafficWar uses to operate the service are listed below.

Version 2026-08-21 · Effective August 21, 2026

## Cloudflare

Content delivery, DNS and network protection, reverse proxying, request metadata and visitor-location headers, and Turnstile bot protection. Cloudflare processes traffic through its global network.

## OVHcloud — Frankfurt, Germany

Primary compute, networking, ClickHouse hosting, and S3-compatible object storage for event rows, Parquet archives, aggregates, manifests, and operational service data in the Frankfurt region.

## HostBrr — Germany

Optional secondary archive replica, storage, and object delivery for retained files. Data is sent there only when the relevant replica or delivery path is enabled.

## Polar

Merchant of Record for paid subscriptions, including hosted checkout, payment processing, tax handling, invoicing and receipts, subscription management, and webhook delivery. Polar receives the account and transaction data needed for those functions.

## Transactional SMTP and mail delivery

TrafficWar’s configured mail provider and recipient mail systems deliver account verification, password reset, security, support, and alert messages. They receive the destination address, message content, and delivery metadata needed to send the message.

## Telegram — optional

When a customer configures a Telegram alert destination, TrafficWar sends the configured chat destination and alert content through the Telegram Bot API. Customers can avoid this processing by not enabling Telegram.

## Self-hosted service components

ClickHouse and Redis run on TrafficWar-controlled infrastructure and are not separate hosting subprocessors. MaxMind GeoLite2 is used as a locally hosted database: IP lookups occur locally and are not sent to MaxMind. These software suppliers do not receive customer event data through normal operation.

## Updates

Customers give general authorization for the subprocessors listed here under the Data Processing Addendum. We will update this page before a new subprocessor begins materially different processing where reasonably practicable. Customers may raise a substantiated data-protection objection at privacy@trafficwar.tech.