Subprocessors

What a subprocessor is

A subprocessor is a third-party company that processes personal data on our behalf so we can run CertPrepX — for example, to host your account data, handle payments, or block automated abuse. We use a small, deliberate set of subprocessors, and each operates under its own security and privacy commitments. We do not sell personal data.

Current subprocessors

• Google Firebase — provides Authentication (Google sign-in), the Firestore database that stores your account and study data, hosting on Google Cloud Run, and push messaging for notifications you opt into.
• Stripe, Inc. — processes payments and subscription billing. Card details are handled by Stripe and are not stored on our servers.
• Google reCAPTCHA / Firebase App Check — bot and abuse protection. It processes your IP address and basic interaction signals to verify that requests come from a genuine browser.

Analytics providers

Google Analytics and PostHog process usage data only if you opt in via the cookie banner; they are off by default. See Cookies & Local Storage for details.

Changes to this list

If we add, replace, or materially change a subprocessor, we will update this page. We encourage you to check back periodically.

Learn more

For how we collect and use personal data overall, see our Privacy Policy.