Subprocessors
Cloudflare is the only company that processes our customers’ personal data for jstash. Last updated 3 October 2026.
A subprocessor is a company we use that handles personal data our customers store with jstash: the JSON in bins, and the documents your app’s users save through jstash Apps.
Current subprocessors
Cloudflare, Inc.United States
What it doesHosting, database, file storage, content delivery and request logs
Where data is storedCloudflare’s Oceania region
Where data is handledEach request is handled in the Cloudflare data centre nearest the caller, which can be anywhere in the world. Public bins are also cached worldwide, and request logs are kept for a few days
EncryptionIn transit with TLS; at rest with AES-256, for both the database and file storage
Its termsCloudflare Data Processing Addendum
Not subprocessors
These handle only details of your own jstash account, never the data you or your app’s users store:
- GitHub (United States): signs you in to the dashboard.
- Stripe (United States): will handle payments once paid plans launch.
Both are covered in our Privacy Policy.
Changes
Before we add or replace a subprocessor, we’ll update this page and email account holders at least 10 business days in advance. If you object, tell us at support@jstash.app within 30 days and we’ll try to resolve it; if we can’t, you can delete your data and close your account.