Where is my data stored, and does it leave the EU?

priceq runs within the EU. The application and the database, with your account data, your catalogue and your price history, sit at Hetzner in Nuremberg, Germany. A few services outside the EU are involved. This article lists them.

Inside the EU

• Hosting of the application, the database and all background work: Hetzner, Nuremberg, Germany.
• E-mail from priceq, such as alerts, invitations and password mails: AhaSend, Amsterdam, with processing inside the EEA.
• Error monitoring: Sentry, EU region in Germany. It receives no personal data from your account.

Outside the EU

• Backups. Every night priceq makes a full backup. It is encrypted before it leaves the German servers. Cloudflare and Backblaze store copies but only receive ciphertext and do not hold the key.
• Network traffic. Cloudflare sits in front of priceq for DNS, protection against misuse and the bot check on the sign-up form. It sees traffic data such as your IP address, browser and the address you request.

These transfers are covered by standard contractual clauses, and for Cloudflare also by the EU-US Data Privacy Framework. The complete list, with purpose and location per party, is on the sub-processors page. See Who are your sub-processors?.

Product matching and page fetching

To find your products on shop websites, priceq uses outside services, some of them outside the EU. They fetch public shop pages, search for product pages and help match them. They only receive product details such as titles and EAN codes, web addresses and search terms. No personal data goes to them.

None of these services receive your account data or e-mail addresses. That is why they are not sub-processors under the data processing agreement.

Payments

Stripe handles checkout and payments, and Moneybird the invoices. For those we are the controller ourselves. The details are in the privacy statement.

To read what is pooled between customers and what stays yours, see Is my data shared with other customers?.