Subprocessors and recipients of data
Who processes VODster users' data on our behalf and who receives it.
List updated: 3 November 2026
This complements the Privacy policy. The controller is VODster sp. z o.o. Below we list the companies we entrust data to, and the companies that receive it as independent controllers.
How we update the list
When we add or change a subprocessor, including an AI model provider, we update the list on this website and, for significant changes, tell you by e-mail. A change to this list is not a change to the Terms and needs no new acceptance. Questions: support@vodster.app.
Subprocessors (process data on our instructions)
We have a data processing agreement with each of them. The category "AI model providers" currently covers DeepInfra and OpenAI; more may be added, and the list below is then updated.
| Provider | Category | Purpose | Data | Country or place of processing | Transfer safeguard | When |
|---|---|---|---|---|---|---|
| DeepInfra | AI model providers | Understanding chat queries, rewriting follow-up questions, the opening sentence of an answer, voice transcription | Chat message text and, for follow-up questions, earlier messages of the conversation; the audio recording for voice search. No e-mail address, name or account identifier | USA | EU standard contractual clauses; Data Privacy Framework where the provider is certified | After you read the information screen and confirm it before using the AI chat |
| OpenAI | AI model providers | Understanding chat queries (fallback model), search embeddings, the opening sentence of an answer, voice transcription, taste portrait ("My taste"), Wrapped summaries | The query text or its English rendering, the audio recording, and for the taste portrait and Wrapped: titles you liked and favourite genres. No e-mail address, name or account identifier | USA | EU standard contractual clauses; Data Privacy Framework where the provider is certified | After you read the information screen and confirm it before using the AI chat; taste portrait and Wrapped when you ask for them |
| Supabase | Database and sign-in | Database, authentication, real-time messaging (e.g. Matchmaker), storage of account data | All account and activity data described in the privacy policy | EU region | EU standard contractual clauses; Data Privacy Framework where the provider is certified | Whenever you use the feature |
| Railway | Application hosting | Hosting of the API server and the in-memory cache (Redis) behind the app and the web app | API requests (including query text while it is being handled), short-lived cache data, technical logs | Depends on our account configuration; available on request | EU standard contractual clauses; Data Privacy Framework where the provider is certified | Whenever you use the feature |
| Cloudflare | Content delivery and site hosting | CDN, DNS and traffic protection, hosting of vodster.app and the web app, cookieless Web Analytics, Turnstile (checking that a person fills in the waitlist form) | IP address, browser headers, the address of the visited page; in Turnstile also the verification token, TLS fingerprint, User-Agent and the key and address of our site | Depends on our account configuration; available on request | EU standard contractual clauses; Data Privacy Framework where the provider is certified | Whenever you use the feature |
| Expo (650 Industries) | Push notifications | Relaying push notifications to Apple and Google | Device token, notification content (may contain the title of a film or series from your lists) | USA | EU standard contractual clauses; Data Privacy Framework where the provider is certified | After you enable notifications on your device |
| Resend | E-mail delivery | Transactional messages: account confirmation, password reset, account deletion confirmations, later purchase confirmations and notices of changes to the Terms | E-mail address, language, message content, delivery log | USA | EU standard contractual clauses; Data Privacy Framework where the provider is certified | Whenever you use the feature |
| PostHog | Product analytics | Measuring use of the app, the web app and vodster.app, error reports from the web app | Device or browser identifier, account identifier, events (e.g. screens opened, query length, never query text), device model and app version | EU cloud | No transfer outside the EEA | Anything stored on your device (app, web app, site) only after your consent; server-side events of a signed-in user rely on legitimate interest |
| GlitchTip | Error reports | Detecting and fixing crashes of the mobile app and the API server | Error description, app version, device model and system; we do not send your e-mail address or account identifier | Depends on our account configuration; available on request | EU standard contractual clauses; Data Privacy Framework where the provider is certified | Whenever you use the feature |
| Slack | Internal team messaging | Internal notices to our team about new accounts, account deletions, plan changes, in-app feedback and waitlist sign-ups | Account notices: display name, sign-in method, language, region, shortened account identifier, no e-mail address (older messages may have carried it). Feedback and waitlist sign-ups: e-mail address and the text of feedback you send us | USA | EU standard contractual clauses; Data Privacy Framework where the provider is certified | Whenever you use the feature |
| RevenueCat | Store subscription management | Verifying Premium purchases in the App Store and Google Play and restoring purchases | Account identifier, store purchase identifier, plan, period, subscription status | USA | EU standard contractual clauses; Data Privacy Framework where the provider is certified | Only where we offer purchase in an app store |
Independent controllers and other recipients
These companies receive data on their own terms, for example when you pay in a store, sign in with an Apple or Google account, or your browser fetches a poster or trailer from them.
| Provider | Category | Purpose | Data | Country or place of processing | Transfer safeguard | When |
|---|---|---|---|---|---|---|
| Cloudflare (Turnstile) | Form protection against bots | Cloudflare uses Turnstile signals as an independent controller only to improve bot detection in Turnstile. It performs the check itself for us as a processor, see the Cloudflare row in the processors table | IP address, TLS fingerprint, User-Agent, site key and address of our site (Turnstile signals) | Depends on our account configuration; available on request | EU standard contractual clauses; Data Privacy Framework where the provider is certified | Whenever you use the feature |
| Stripe | Web payments | Processing Premium payments and subscriptions in the browser, invoices, refunds | Payment and billing details entered at checkout; we receive the status, plan, period and transaction identifier, never the full card number | EU (Stripe Payments Europe) and USA | EU standard contractual clauses; Data Privacy Framework where the provider is certified | Only where we offer payment in the browser |
| Apple | Store, sign-in, notifications | App Store (purchases, refunds, subscription management), Sign in with Apple, push notifications on iOS | Data Apple shares at sign-in (identifier, e-mail, name if you share it), purchase data, notification token | Depends on our account configuration; available on request | The provider acts as an independent controller; its own privacy policy describes transfers | When you use these features on an Apple device |
| Store, sign-in, notifications, Cast | Google Play (purchases, refunds, subscriptions), Google sign-in, push notifications on Android, Google Cast | Data shared at sign-in (identifier, e-mail, name), purchase data, notification token | Depends on our account configuration; available on request | The provider acts as an independent controller; its own privacy policy describes transfers | When you use these features | |
| Google Analytics 4 | Analytics for vodster.app | Measuring traffic and campaign performance on the marketing site | Cookie identifiers (_ga), IP address, visited pages, referrer | Depends on our account configuration; available on request | EU standard contractual clauses; Data Privacy Framework where the provider is certified | Only after your consent on the site |
| YouTube | Trailers | Playing trailers embedded in the app and the web app (youtube-nocookie mode in the web app) | IP address and browser headers when the player loads | Depends on our account configuration; available on request | EU standard contractual clauses; Data Privacy Framework where the provider is certified | When you view a trailer |
| TMDB (obrazy) | Film posters | Displaying posters and pictures fetched directly from TMDB image servers | IP address and browser or app headers when an image is fetched; we pass no data from your account | Depends on our account configuration; available on request | The provider acts as an independent controller; its own privacy policy describes transfers | Whenever you use the feature |
| YouTube, Vimeo, Spotify, SoundCloud (podglądy linków) | Link previews on lists | Fetching the title and thumbnail of a link you add to your own list | The address of the added link, sent from our server; no account data | Depends on our account configuration; available on request | The provider acts as an independent controller; its own privacy policy describes transfers | The feature is being rolled out gradually and is not yet available to everyone |
Film data sources
TMDB, Movie of the Night (Streaming Availability), OMDb, Wikipedia, TVmaze and Wikidata supply our film and series data. We send them catalogue queries only, never user data. See Sources and licences.