Sub-processors
Last updated: May 6, 2026
To deliver our services we rely on the third-party providers listed below. Each provider may process limited customer information solely for the purpose described. We choose providers with strong security and privacy practices and review this list periodically. Material changes are reflected here.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, fraud prevention | Name, email, billing address, payment method, transaction details | USA |
| Cloudflare, Inc. | Website hosting (Pages), database (D1), DNS, web analytics, DDoS protection | Customer-submitted form data, IP, user-agent, request logs | USA / global edge network |
| Google LLC (Google Analytics 4) | Aggregate site traffic and behavior analytics | IP (truncated), user-agent, page interactions, anonymized identifiers | USA |
| Printful, Inc. | On-demand production and order fulfillment for select items | Name, shipping address, order details | USA |
| GitHub, Inc. | Source code hosting and continuous deployment | No customer personal data | USA |
How we share data with sub-processors
Sub-processors only receive the minimum data needed to perform their function. We do not sell personal information to any of these providers, and they are contractually limited to using data only for the services they provide to us.
Updates
We may add, remove, or change sub-processors as our business evolves. The effective list is always the one published here.
Questions
Email contact@craft-and-press.com.
Craft and Press