Trust
Subprocessors
The companies we rely on to run ConsentCook, what each one does, and where it sits.
| Name | Purpose | Location | Role |
|---|---|---|---|
| Arched Group Limited (self-hosted infrastructure) | Application, database and consent receipt hosting | United Kingdom | processor |
| Backblaze, Inc. (B2 Cloud Storage) | Encrypted offsite copies of database backups | European Union (Amsterdam, Netherlands) | processor |
| Transactional email relay (SMTP) | Delivery of account, billing and notification email | United Kingdom / EU | processor |
| Stripe Payments Europe, Ltd. | Subscription billing, card payments and invoicing | EU (Ireland), with onward transfers under Stripe's own safeguards | processor |
How we work out a visitor’s country
To show the right consent choices, ConsentCook needs to know roughly where a visitor is. We work that out on our own servers by looking their IP address up in a database we hold locally — the address is never sent to anyone else, and we do not store it.
That database is IP Geolocation by DB-IP, used under CC BY 4.0. DB-IP is not a subprocessor and receives no data from us.