Draft — under legal review. This text describes what WatchLog Cloud does today, in plain language. A lawyer is reviewing it, and it may change before Cloud opens. Last updated 2026-11-14.
Last updated: 2026-11-14. These are the services that process data for WatchLog Cloud. We will update this page, and tell the Owners of every organization by email, before a new one starts processing your data. Questions: [email protected].
| Service | What it does for WatchLog Cloud | What it sees |
|---|---|---|
| Cloudflare (privacy policy) | Delivers watchlog.io and cloud.watchlog.io and protects them from attacks; Turnstile, the check that you're a person on sign-up and password reset | Every request: IP address, browser, the address requested. Turnstile: browser signals |
| Stripe (privacy policy) | Payments, once billing starts | The Owner's billing email and the card details you enter on Stripe's own pages (never on ours) |
| The transactional email provider (to be named) | Sends account emails, service notices and the getting-started emails | Recipients' email addresses and the emails' text |
| The backup storage provider (to be named) | Stores the encrypted off-site backups | Only encrypted files: backups are encrypted on our server before they leave it, with keys it never gets |
| The hosting provider (to be named) | Runs the server WatchLog Cloud runs on | Everything stored on that server, as its host |
Not subprocessors
- GitHub and Google, only if you choose to sign in with them: you share your account with WatchLog through them, under their terms.
- Have I Been Pwned: when you choose a password, we send the first 5 characters of its SHA-1 hash, which can't identify you or the password.
- The uptime service behind status.watchlog.io checks that the service answers from outside; it gets no customer data.
- Microsoft Clarity runs only on the marketing site watchlog.io, only if you accept analytics (privacy policy), never on cloud.watchlog.io.