Service Providers and Third Parties
Last updated: 2026-08-27
This page lists every company or system that may receive Kwipsy user data, what it receives it for, and its current status — including recipients that are disclosed ahead of time but are not receiving anything yet. We call it "Service Providers and Third Parties" rather than "Subprocessors" because some recipients act as independent controllers of the data they handle, not as our processors, and "subprocessor" would misdescribe those rows. Our Privacy Policy explains the data categories, purposes, and legal bases in more detail; this page tracks who currently has, or may in future have, access to them.
As of the date above, Kwipsy has not launched, and almost nothing on this
page is running yet. The application backend — the sync server and
database that would hold your account, decks, and study history — is not
deployed. The only thing actually operating today is domain registration and
nameservice for kwipsy.com: the domain points at Cloudflare's nameservers,
and nothing else. There is no web server answering for the domain yet and no
mail server accepting sign-in email yet — this page itself, and every other
page on this site, is not publicly reachable at kwipsy.com until that
changes. Every row below except the nameservice row is therefore Planned,
disclosed now so the pool of possible recipients is on the record before
anything is sent to any of them, not because they are handling data today.
Status meanings:
- Active — currently receiving data through normal operation. A row only
carries this status once every field below is filled in; a row cannot be
Activewith an unknown region or an unchosen provider. - Planned — not receiving Kwipsy data — disclosed ahead of use, but not yet integrated, not yet under contract, or waiting on a dependency (such as the backend itself) that does not exist yet. Receives nothing today.
- Suspended — temporarily not receiving new data — integrated in the past, paused now; data previously sent to it may still be held under its own retention schedule.
- Inactive — no longer receiving new data — permanently disconnected; historical retention may continue until the provider's own schedule expires it. No row carries this status today.
| Last updated | Category | Role | Status | Data & purpose | Region | Retention |
|---|---|---|---|---|---|---|
| 2026-08-27 | Cloudflare, Inc. — domain registration and nameservice for kwipsy.com | Registrar / DNS operator | Active | None — nameserver delegation carries no Kwipsy user data; no site or mail is served through Cloudflare yet | Global anycast network; Cloudflare, Inc. is a US company | Not applicable |
| 2026-08-27 | Cloudflare, Inc. — site hosting and mail service (sign-in email) | Processor | Planned — not receiving Kwipsy data | None today. If activated: website traffic metadata; the address and content of sign-in emails | Global edge network; Cloudflare, Inc. is a US company | Not yet applicable |
| 2026-08-27 | Cloudflare, Inc. — R2 object storage | Processor | Planned — not receiving Kwipsy data | None today. If activated: uploaded and imported media, once the application backend that would write to it exists | To be confirmed when this row activates | Not yet applicable |
| 2026-08-27 | Application and database hosting provider — not yet chosen | Processor | Planned — not receiving Kwipsy data | None today. If activated: all account and sync data described in our Privacy Policy | Canada | Not yet determined |
| 2026-08-27 | Analytics | Processor | Planned — not receiving Kwipsy data | None today: the current release build ships without an analytics key, so no analytics events are sent. If enabled: analytics events | Not yet chosen | Not yet determined |
| 2026-08-27 | Crash reporting | Processor | Planned — not receiving Kwipsy data | None today. If activated: diagnostic and crash data | Not yet chosen | Not yet determined |
Change log
- 2026-08-27 — Removed two rows for a card-generation feature that is
not part of the product today. A page listing a feature the product does
not have described the same defect our legal review kept finding, so the
rows are gone rather than left as
Planned. They will return, correctly scoped, once that feature actually ships. - 2026-08-12 — Page created, then corrected the same day after a
factual check: domain nameservice for kwipsy.com is the only thing
actually running. The Cloudflare row that had claimed to serve this
website and route Kwipsy's sign-in email was false —
digshows no A record and no MX record for the domain — and has been split into a nameservice row (genuinely active) and a Pages/Email row (planned, not receiving data).
We keep this page current as our list of providers changes and as rows move
from Planned to Active. We do not promise advance notice before a new
provider is added, since we cannot guarantee that operationally; we do
promise that a provider does not move to Active for a category of data
until this page reflects it, with every field in its row filled in.
The party popper illustration is from Microsoft Fluent Emoji, used under the MIT licence.