Subprocessors

Last updated: October 20, 2026

This page lists the companies that process personal information on Manolab's behalf for Showcaser, what each does, and where. It is part of our Privacy Policy.

There are two, because Showcaser keeps very little: no accounts, no visitor records, no analytics.

Cloudflare, Inc.

• What it does: runs the Service. Its Workers platform builds and serves every showcase, at name.showcaser.app and at owners' own domains, and takes the App's signed changes; its R2 storage holds every showcase's files; Cloudflare for SaaS registers owners' own domains and issues their security certificates; its public DNS resolver answers the lookups that show an owner how their domain is going; its rate limiter counts writes per IP address; it hosts this website; and it runs Manolab's issue-reporting service and the Turnstile check that protects the report form.
• Data: everything in a showcase's folder, as the Privacy Policy describes (most of it public by the owner's choice; app-only fields sealed so neither we nor Cloudflare can read them); the technical details of every web request, such as IP addresses; owners' domain names; issue reports on their way to GitHub.
• Where: Cloudflare's global network; stored data in the storage locations Cloudflare chooses.
• Its terms: cloudflare.com/privacypolicy

GitHub, Inc. (Microsoft)

• What it does: holds the private issue tracker that issue reports are filed into.
• Data: what a person puts in an issue report (its kind, a title, a description, what it is about, an optional name and email), the page it was sent from, the browser's description of itself, and the language setting.
• Where: United States.
• Its terms: GitHub's privacy statement

Services people use alongside Showcaser

These aren't our subprocessors, because they act for the owner or the visitor directly, but they are part of the picture:

• Apple: the App Store; iCloud Keychain, which keeps and syncs each showcase's key under the owner's Apple ID; the photo picker and the camera's live scanner, on the device; and Apple Maps, when a visitor taps a showcase's address.
• An owner's registrar or DNS provider, which holds their own domain and its records.
• A visitor's phone carrier, messaging app or email provider, which carries their calls, texts and emails to an owner.

Changes

When we add or replace a subprocessor, we update this page, with its date, before the change takes effect.

Manolab, LLC