# Subprocessors

**Last updated:** October 20, 2026

This page lists the companies that process personal information on Manolab's behalf for Showcaser, what each does, and
where. It is part of our [Privacy Policy](https://showcaser.app/privacy).

There are two, because Showcaser keeps very little: no accounts, no visitor records, no analytics.

## Cloudflare, Inc.

- **What it does:** runs the Service. Its Workers platform builds and serves every showcase, at *name*.showcaser.app
  and at owners' own domains, and takes the App's signed changes; its R2 storage holds every showcase's files; Cloudflare
  for SaaS registers owners' own domains and issues their security certificates; its public DNS resolver answers the
  lookups that show an owner how their domain is going; its rate limiter counts writes per IP address; it hosts this
  website; and it runs Manolab's issue-reporting service and the Turnstile check that protects the report form.
- **Data:** everything in a showcase's folder, as the Privacy Policy describes (most of it public by the owner's choice;
  app-only fields sealed so neither we nor Cloudflare can read them); the technical details of every web request, such as
  IP addresses; owners' domain names; issue reports on their way to GitHub.
- **Where:** Cloudflare's global network; stored data in the storage locations Cloudflare chooses.
- **Its terms:** [cloudflare.com/privacypolicy](https://www.cloudflare.com/privacypolicy/)

## GitHub, Inc. (Microsoft)

- **What it does:** holds the private issue tracker that issue reports are filed into.
- **Data:** what a person puts in an issue report (its kind, a title, a description, what it is about, an optional name
  and email), the page it was sent from, the browser's description of itself, and the language setting.
- **Where:** United States.
- **Its terms:** [GitHub's privacy statement](https://docs.github.com/site-policy/privacy-policies/github-general-privacy-statement)

## Services people use alongside Showcaser

These aren't our subprocessors, because they act for the owner or the visitor directly, but they are part of the
picture:

- **Apple**: the App Store; iCloud Keychain, which keeps and syncs each showcase's key under the owner's Apple ID; the
  photo picker and the camera's live scanner, on the device; and Apple Maps, when a visitor taps a showcase's address.
- **An owner's registrar or DNS provider**, which holds their own domain and its records.
- **A visitor's phone carrier, messaging app or email provider**, which carries their calls, texts and emails to an
  owner.

## Changes

When we add or replace a subprocessor, we update this page, with its date, before the change takes effect.

**Manolab, LLC**