About this register
Escapestamp is responsible for selecting and overseeing the providers listed below. Depending on the service and context, a provider may act as our processor, subprocessor, or an independent controller for limited service-generated data.
A provider’s own subprocessors are maintained in its linked register and are not repeated here. We review this page when our production services change. Software that is installed but does not currently receive personal data is not listed.
Current providers
Vercel, Inc.
- Purpose
- Website hosting, content delivery, server-side execution, operational logs, Web Analytics, and Speed Insights.
- Data involved
- IP address and request metadata; data sent to or returned by the application; page-view, usage, and performance information.
- Processing locations
- European Economic Area, United States, and other locations used by Vercel and its subprocessors.
- Provider information
- Privacy and subprocessor documentation
Clerk, Inc.
- Purpose
- Account registration, authentication, session management, and organization management.
- Data involved
- Name, email address, username, profile details, user and organization identifiers, and authentication and session data.
- Processing locations
- United States and other locations listed in Clerk’s current subprocessor register.
- Provider information
- Privacy and subprocessor documentation
Prepr B.V.
- Purpose
- Content management for the room and venue catalogue, organization-managed listings, and related assets.
- Data involved
- Organization, venue, room, and stamp information; organization identifiers; and listing assets submitted for publication or review.
- Processing locations
- European Union.
- Provider information
- Privacy and subprocessor documentation
Neon, LLC
- Purpose
- Managed PostgreSQL database hosting for passports, stamp records, and operational state.
- Data involved
- User identifiers, passport profile details, nationality, collected stamps, play dates, webhook event identifiers, and administrative job records.
- Processing locations
- Primary database hosted in AWS eu-central-1 (Frankfurt, Germany); support subprocessors may operate in other locations.
- Provider information
- Privacy and subprocessor documentation
- Purpose
- Optional analytics and advertising measurement. These tools are activated only after the relevant cookie consent.
- Data involved
- Page URL, page title, interaction events, and campaign or measurement information configured through Google Tag Manager.
- Processing locations
- Google’s global infrastructure and locations described in its applicable data-processing terms.
- Provider information
- Privacy and subprocessor documentation
Telegram
- Purpose
- Operational alerts to Escapestamp staff. Data is sent only when an organization synchronization fails and alerts are configured.
- Data involved
- Organization name and identifier, webhook event identifier, and the status of a failed Prepr synchronization.
- Processing locations
- Telegram’s global infrastructure as described in its privacy documentation.
- Provider information
- Privacy and subprocessor documentation
Changes and international transfers
We may add or replace a provider as Escapestamp changes. Material changes will be reflected on this page and, where required, communicated separately.
Where personal data is transferred outside the European Economic Area, we use an applicable adequacy decision or contractual safeguards such as the European Commission’s Standard Contractual Clauses, as appropriate for the provider and service.