Legal
Sub-processors
Last updated: 2 October 2026
Who handles your data
G NETWORKS runs varsafe with the providers below. Each one processes personal data on our behalf to provide its part of the service, under a contract with data protection terms. Where a provider also processes data for its own purposes, as Stripe does for fraud prevention and its legal obligations, it does so as an independent controller under its own privacy policy. We update this page before a new provider starts processing personal data. Questions go to support@varsafe.dev.
netcup GmbH
- Purpose
- Infrastructure hosting.
- Data
- Account and team data, audit logs, and secrets in encrypted form.
- Location
- Germany
Scaleway SAS
- Purpose
- Infrastructure hosting, encrypted storage and backups, analytics and monitoring.
- Data
- Secrets and backups in encrypted form, service logs, and page-view statistics without cookies.
- Location
- France and the Netherlands
Stripe Payments Europe, Ltd.
- Purpose
- Billing and payments.
- Data
- Billing contact details, payment method (held by Stripe, never by varsafe) and subscription history.
- Location
- Ireland; transfers to the United States rely on the EU-US Data Privacy Framework where it applies, and Standard Contractual Clauses otherwise
Sendinblue SAS (Brevo)
- Purpose
- Transactional email.
- Data
- Recipient email address and name, and the content of the message.
- Location
- France
BunnyWay d.o.o. (bunny.net)
- Purpose
- Content delivery and DNS.
- Data
- Visitor IP addresses and request details.
- Location
- Slovenia; requests may be served from edge locations worldwide, including outside the EEA
Sign-in providers
If you sign in with GitHub, Google, GitLab or Bitbucket, that provider receives your sign-in request and returns your name and email address to varsafe. It acts as an independent controller under its own privacy policy, not as a sub-processor of varsafe, and it is used only when you choose it.