Subprocessors

Last updated: 2026-09-03

A subprocessor is a company that handles data on Pebble's behalf. This page names every one of them, what each receives, and where it runs, as GDPR Art. 28 requires. Your photos, videos, contacts, and calendar events appear nowhere on this list, because they never leave your device — what Pebble's servers hold is set out in the privacy policy.

Hetzner Online GmbH

Runs the server that answers the app's requests and holds the Postgres database today, and serves this website. Everything the privacy policy says Pebble stores is stored there: the account identifier, the device record, subscription state, support tickets, and newsletter subscribers. Germany. This is interim hosting until the configuration below is in place.

Cloudflare

Checks the forms on this website for automated abuse; the verification request for the form you submit is the only data Cloudflare handles today. Its wider role — running the edge that answers the app's requests — is the target configuration and is not processing data yet. Global edge network.

Supabase

Is the target host for the Postgres database that holds the records described in the privacy policy. It is not processing data yet: that database runs on the Hetzner server above today. European Union.

RevenueCat

Manages subscriptions and purchases. It receives an anonymous purchase identifier and the entitlement state attached to it — no name, no email address, and no card details, which Apple and Google handle themselves. United States.

Sentry

Receives crash and error reports, and only if you turn them on. Email addresses, phone numbers, and coordinates are removed before a report leaves your device. European Union or United States, depending on the region of the Pebble project.

PostHog

Receives anonymous, bucketed product analytics, and only if you turn analytics on. Events arrive under an anonymous identifier that rotates every 7 days and is never linked to your account. European Union (Frankfurt).

Resend

Sends the email Pebble sends you: the newsletter confirmation and its issues, and the messages about your subscription. It receives the address the message goes to and the message itself. United States.

İleti Merkezi

Delivers the one-time code that verifies a phone-number sign-in. It receives the phone number and the code, in transit. Türkiye.

Apple

Provides Sign in with Apple. It receives the account identifier it issued for you. Apple's push service does not yet carry any Pebble notification — when it does, it will receive the push token for your device, only for as long as notifications stay on. Global.

Google

Provides Sign in with Google. It receives the account identifier it issued for you. Google's push service does not yet carry any Pebble notification — when it does, it will receive the push token for your device, only for as long as notifications stay on. Global.

Changes to this list

If a subprocessor is added or replaced, this page is updated and the change is noted in the privacy policy within 24 hours. Questions about anything on this page go to pebble@muhittincamdali.com.