Effective Date: January 1, 2026

Graphical Playground (“GP” or “Graphical Playground”) uses the third-party service providers listed on this page (“Sub-processors”) to deliver the GP Platform, as described in Section 1.3 of the Terms of Service. Each Sub-processor processes personal data only to the extent necessary to perform the function listed below and is bound by data protection obligations consistent with GP’s Privacy Policy and, for institutional Customers, the Data Processing Addendum.

Current Sub-processors

Sub-processor	Purpose	Location
IONOS	Domain name registration and management	Germany
Vercel	Hosting and deployment of the GP Platform’s web applications	United States
GitHub Pages	Hosting of public documentation sites	United States
GitHub	Source code hosting, version control, and issue tracking for open-source repositories	United States
Cloudflare	DNS resolution, content delivery network, and network security	United States
Cloudflare R2	Object storage for static assets and files	United States
Stripe	Payment processing and subscription billing	United States
Clerk	Authentication, account management, and transactional email delivery	United States

1. International Transfers

1.1. Where a Sub-processor is located outside the European Economic Area, GP relies on appropriate safeguards under Chapter V of the GDPR, including the Standard Contractual Clauses approved by European Commission Implementing Decision (EU) 2021/914, consistent with Section 1.3 of the Terms of Service and Section 5 of the Data Processing Addendum.

2. Updates to This List

2.1. GP reviews this list when it adds, replaces, or removes a Sub-processor. For institutional Customers under a Data Processing Addendum, GP provides notice of a new Sub-processor as described in Section 4.2 of that Addendum, including the right to object on reasonable data protection grounds.

3. Contact

For questions about GP’s Sub-processors, contact privacy@graphical-playground.com.