Last updated 3 November 2026

Sub-processors

The third parties that process personal data for QuickReeds and this website: what for, which data and where. Where we haven't confirmed a location yet, the entry says so.

The product

Cloudflare: Workers

Purpose
Runs the app, the API, report links and this website.
Data
Every request to QuickReeds, including IP addresses, and the report content being served.
Location
Cloudflare's global network, at the data centre nearest the visitor.

Cloudflare: R2

Purpose
Stores report files and brand assets.
Data
Report content and logos, encrypted by QuickReeds with a key per org before they're stored.
Location
EU (R2 EU jurisdiction).

Cloudflare: Hyperdrive and Tunnel

Purpose
Connects the Workers to the database. Query caching is off.
Data
Database queries and their results, in transit.
Location
Cloudflare's network; the tunnel connects to it in Frankfurt, Germany.

Cloudflare: Durable Objects, KV and Queues

Purpose
Rate limits, usage quotas, sign-in grants for AI agents (OAuth) and background report rendering.
Data
Counters keyed by org, email address or IP address; OAuth grant records; render job IDs.
Location
To confirm.

Cloudflare: Email Sending

Purpose
Sends sign-in codes, report shares, reader codes and member notifications.
Data
Recipients' email addresses and the email's content.
Location
Cloudflare's global network.

Cloudflare: Turnstile

Purpose
Checks for bots on the reader code page, the share-link password page and this website's application form.
Data
Browser and connection signals from the visitor.
Location
Cloudflare's global network.

Cloudflare: Analytics Engine

Purpose
Counts report views for usage quotas.
Data
One data point per view: the org and report IDs.
Location
To confirm.

Hetzner

Purpose
Hosts the server that runs our Postgres database, which we manage ourselves.
Data
Account, org and report records: members, readers, shares, settings and the audit log.
Location
Germany.

Sentry

Purpose
Error diagnostics.
Data
Error reports with internal org and user IDs. Email addresses, tokens, cookies and request bodies are removed before sending; no report content.
Location
EU (Germany).

Google

Purpose
Sign-in, only for members who choose to sign in with Google.
Data
The member's name, email address and Google account ID.
Location
To confirm.

Microsoft

Purpose
Sign-in, only for members who choose to sign in with Microsoft.
Data
The member's name, email address and Microsoft account ID.
Location
To confirm.

GitHub

Purpose
Code hosting, and the CI that deploys QuickReeds, runs database migrations and sets up new orgs.
Data
An org's name and its owner's email address, when we set up an org. No report content.
Location
To confirm.

This website

Cloudflare: D1

Purpose
Stores pilot applications from this website.
Data
What applicants type into the form, the campaign that brought them and their country.
Location
To confirm.

Cloudflare: Web Analytics

Purpose
Visit statistics for this website, without cookies.
Data
Page views and the visitor's browser and connection details.
Location
Cloudflare's global network.

MXroute

Purpose
Hosts our inbox (hello@, privacy@, abuse@ and security@quickreeds.com).
Data
Emails people send us, and our copies of application notifications.
Location
To confirm.

Questions

Email hello@quickreeds.com.