Legal
Subprocessors
Every outside service that touches data from this site, what it receives, and when it was added.
Last updated August 24, 2026
How to Read This
A subprocessor is any vendor that processes data on my behalf. Some are unavoidable and run the site itself. Some only run after you allow the matching cookie category. Some never see a visitor at all and only read published pages.
Infrastructure and hosting
These providers run the site itself. Every visit touches them, which is why they sit in the strictly necessary category.
| Vendor | Purpose | Data received | Region | Listed |
|---|---|---|---|---|
| Lovable | Application hosting, build, and deployment for this site. | Request metadata, IP address, and user agent. | United States and global edge | August 24, 2026 |
| Cloudflare | Content delivery, edge runtime, and denial of service protection. | Request metadata, IP address, and user agent. | Global edge | August 24, 2026 |
| Supabase | Database, authentication, file storage, and server functions behind forms and admin tools. | Names, email addresses, form submissions, review media, consent records, and hashed IP values. | United States | August 24, 2026 |
Email delivery
Mail is sent only to addresses that confirmed through a double opt-in, or in direct reply to something you sent me.
| Vendor | Purpose | Data received | Region | Listed |
|---|---|---|---|---|
| Resend | Transactional and list email, including verification, unsubscribe, deletion, and export messages. | Name, email address, message content, delivery status, and open or click events. | United States | August 24, 2026 |
| Google Workspace | Business email hosting for direct correspondence, including replies to messages you send me. | Name, email address, message content, attachments, and mail metadata. | United States and global | August 24, 2026 |
| Mailgun (through HighLevel) | Outbound email delivery for messages sent from my HighLevel workspace, including follow-up and list mail. | Name, email address, message content, and delivery status. | United States | August 24, 2026 |
| HighLevel | Contact records and campaign orchestration behind email sent outside this site's own forms. | Name, email address, phone number, tags, and message history. | United States | August 24, 2026 |
Analytics and advertising pixels
None of these load until you allow the matching cookie category. Reject them and no request is made to these vendors at all.
| Vendor | Purpose | Data received | Region | Listed |
|---|---|---|---|---|
| Google AnalyticsLoads only with analytics consent | Aggregate traffic and behavior measurement. | Page views, events, referrer, device and browser data, and a pseudonymous identifier. | United States and global | August 24, 2026 |
| Microsoft ClarityLoads only with analytics consent | Heatmaps, scroll depth, hover, click, and session replay measurement. | Interaction events, viewport data, and a pseudonymous identifier. Input fields are masked. | United States | August 24, 2026 |
| RaekLoads only with analytics consent | Visitor identification and behavior tracking tied to content performance. | Page views, referrer data, and a pseudonymous identifier. | United States | August 24, 2026 |
| Crazy EggLoads only with analytics consent | Heatmaps, scroll maps, and click tracking across pages. | Interaction events, viewport data, and a pseudonymous identifier. | United States | August 24, 2026 |
| Behavioral analytics pixelLoads only with analytics consent | Element-level engagement and interaction tracking. | Interaction events and a pseudonymous identifier. | United States | August 24, 2026 |
| Google AdsLoads only with marketing consent | Conversion measurement and remarketing audiences. | Conversion events and a pseudonymous advertising identifier. | United States and global | August 24, 2026 |
| Meta PixelLoads only with marketing consent | Conversion measurement and remarketing audiences. | Page and conversion events and a pseudonymous advertising identifier. | United States and global | August 24, 2026 |
| LinkedIn Insight TagLoads only with marketing consent | Conversion measurement and remarketing audiences. | Page and conversion events and a pseudonymous advertising identifier. | United States and global | August 24, 2026 |
| Microsoft Advertising (Bing UET)Loads only with marketing consent | Conversion measurement and remarketing audiences. | Page and conversion events and a pseudonymous advertising identifier. | United States and global | August 24, 2026 |
AI processing
AI vendors only receive what you deliberately submit, such as a recorded review or a message routed to my assistant.
| Vendor | Purpose | Data received | Region | Listed |
|---|---|---|---|---|
| Google Gemini | Transcription of voice and video reviews submitted through the review intake. | The audio or video file you upload and its transcript. | United States | August 24, 2026 |
| Lovable AI Gateway | Routing for AI features on this site, including my assistant Miko. | The text or media you submit to an AI feature. | United States | August 24, 2026 |
Content, indexing, and crawling tools
These process published pages, not visitor identity. They are listed because they read this site on a schedule and because published content can end up inside their systems.
| Vendor | Purpose | Data received | Region | Listed |
|---|---|---|---|---|
| Google Search and Search Console | Search indexing and search performance reporting. | Published page content and aggregate, anonymized search query reports. | Global | August 24, 2026 |
| Bing Webmaster Tools and IndexNow | Search indexing and index submission. | Published page content and URL submissions. | Global | August 24, 2026 |
| Firecrawl | Crawling and structured extraction of published pages for content workflows. | Published page content only. | United States | August 24, 2026 |
| Raek | Content pipeline and distribution tooling for published writing. | Published page content and article metadata. | United States | August 24, 2026 |
Content Crawling and AI Training
Crawling and content tools process what I published, not who you are. Published writing can be indexed by search engines and read by language models. If you submitted a review, only the parts I publish are exposed that way. Nothing from a private form, an email list, or a contact message is fed into a content pipeline.
Adding a Vendor
New vendors are appended to this page with the date they were listed, and the change log below records the addition. When a new vendor falls into the analytics or marketing category, the consent version is bumped, which means the banner asks you again instead of assuming your old answer still applies.
Change Log
| Date | Change |
|---|---|
| August 24, 2026 | Initial register published, covering hosting, database, email, analytics, advertising pixels, AI processing, and content crawling vendors. |
| August 24, 2026 | Added Raek, Crazy Egg, and a behavioral analytics pixel to the analytics category. |
| August 24, 2026 | Added Google Workspace, Mailgun, and HighLevel to the email delivery category. |
Questions
Ask about any vendor on this list at ben@benmcgary.com, or through the contact page.