Subprocessors and other services
Each company. What it sees.
Two kinds of outside company handle personal data so that Margin can run. Subprocessors act for us, on our instructions: our server's host, our web host, our backup store, our phone alerts and our email. Other services see your data under their own terms, because you bring or authorize them: Google, when you sign in with it, and Lemon Squeezy, the merchant of record, when you pay. A Margin desk device also reaches a few services of its own, listed apart. This page lists each one, what it does, what it sees, and where. It is the same list as section 03 of our privacy policy, mostly in that section's own words. If the two ever disagree, the privacy policy is the one that counts.
Last updated · 30 October 2026
01The list
What each one sees.
Each company, the job it does, what it sees, and where it handles your data. Each region is where the company itself says it does, in its own published policies.
Act for us
These companies handle personal data on our instructions, to run the parts of Margin we operate.
| Company | What it does for us | What data | Where |
|---|---|---|---|
| Hetzner | Provides our one server. We run the software on it ourselves. | Everything in section 01 of the privacy policy, the waitlist record included, along with our error tracker. How long each thing stays is in section 04. | Finland, in the European Union |
| Cloudflare | Hosts this website, carries the waitlist form to our server, and counts visits. | Your visits to this site: your network address, your browser and the pages you open. The waitlist form as it passes through, and a short log of each waitlist form request, kept for a few days, which we can read. What the plugin and your device send to our server doesn't go through Cloudflare. | Worldwide, at the location nearest you; Cloudflare keeps its own records mainly in the United States and the European Economic Area |
| Backblaze | Stores a copy of our nightly backup. | The backup, encrypted on our server before it's sent, with a key that is kept off our server, so neither Backblaze nor our server can read it. | The Netherlands (Amsterdam), in the European Union |
| ntfy.sh | A public notification service. When someone joins the waitlist, or a purchase needs a manual check, it sends us a phone alert. | For a waitlist signup, only that someone joined, and from which page. Nothing you type in the form goes to it. For a purchase check, a reference number and no name or email. | Runs on DigitalOcean; the country is not published |
| Zoho | Runs our email. | What you write to us, at privacy@margin.computer or any of our addresses, and the emails we send you, such as our replies. A problem report you copy from the plugin and paste into an email to us is kept as part of that email. | The United States |
Other services that see your data, under their own terms
You bring or authorize these, and each handles your data under its own terms: Google when you sign in with it, and Lemon Squeezy, the merchant of record, when you pay.
| Company | What it does | What data | Where |
|---|---|---|---|
| Sign-in: who you sign in with. | Tells us your account email and a stable account ID, and nothing more; your password stays with Google. Google sees that you signed in to Margin. If we let your account test Margin Almanac and you connect Google Calendar, Margin also asks Google when you are busy on the calendars you pick (only start and end times come back), and writes the study blocks you add to Margin's own calendar there, so Google sees those requests. | Worldwide: Google says it runs data centers around the world | |
| Lemon Squeezy | The merchant of record, who handles any payment (a Margin Pass or a license key). They take the card, the tax, and the refund. | It takes the card, the tax, and the refund, and passes us your name, email, and an opaque reference that links the purchase to your account. We keep the email and the reference, not the name. We never see or store card numbers, and no academic data is part of a checkout. | The United States |
Only if you have a Margin desk device
A desk device reaches these services itself. Each sees the device's network address, under its own terms.
| Company | What it does | What data | Where |
|---|---|---|---|
| Open-Meteo | A free public weather API, reached only if you turn on the device's optional weather widget (off by default). | The device's network address and the city or coordinates, but no account, name or email. | Europe or North America, whichever server is nearer |
| GitHub | Hosts the software updates for Margin devices. | The device's network address, since a device asks it for updates. Nothing about you or your account is sent. | The United States and other countries where GitHub operates |
| Google, Microsoft and Mozilla; public internet time servers | Connection checks and time servers a device contacts, to check that its Wi-Fi works and to set its clock. | Only the device's network address. | Worldwide: Google's and Microsoft's servers in many countries, Mozilla's through a worldwide network, and volunteer time servers chosen near you |
Our error tracker runs on our server in Finland, so error reports aren't sent to any other company. No marketing pixels, no chat widgets, no data brokers.
02Your own accounts
Yours, not ours.
Apart from the parts named above, such as Google sign-in, some services you use with Margin aren't on this list, because the account is yours, not ours: your school's course sites (Canvas, Blackboard, D2L, or Moodle), Todoist, any calendar you add (Apple, Google, Outlook, Proton, Notion, your school's academic calendar), and any AI you paste a prompt into. You chose them, and each keeps your data under its own terms.
Todoist is the one most people use. Your tasks live in your own Todoist account, operated by Doist (the company behind Todoist) under their own privacy policy: doist.com/privacy. The browser plugin writes your assignments there using your own Todoist OAuth token. Section 03 of the privacy policy says where each piece of your data lives, these accounts included.
03When this list changes
A dated line, every time.
When a company joins or leaves this list, section 03 of the privacy policy changes with it, and this page gets a dated line in the log below. Adding a new third party is a meaningful change to the privacy policy, and section 09 says how you hear about it: we tell you in the plugin, and by email where we have your address. The notice says what changed, in plain language, and links to the updated policy.
04Change log
- 30 October 2026 First version of this page. It lists the same companies as section 03 of the privacy policy, as corrected on 29 October 2026, in three groups: the companies that act for us, the services under their own terms, and the ones only a desk device contacts. It says where each one handles your data.
Questions about any of them? Email us.
Marginalia.