Correct data-residency: US app/DB, EU object storage
Privacy policy and infrastructure docs claimed object storage was in the US.
Actual: application server + PostgreSQL in Hetzner US-West (Oregon); object
storage in the EU (user files in Falkenstein DE, SyncKit blobs/OTA in Helsinki FI).
Name both jurisdictions; SCC language retained for EU<->US flows. Region-level
only, no IPs/endpoints/bucket names.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2 files changed,
+3 insertions,
-2 deletions
| 98 |
98 |
|
|
| 99 |
99 |
|
## International Transfers
|
| 100 |
100 |
|
|
| 101 |
|
- |
Data is processed in the United States and Germany (application server hosted by Hetzner in Germany; object storage and backups in the US).
|
|
101 |
+ |
Your data is processed in the United States (application server and database) and the European Union (file storage in Germany and Finland). For the specific providers and regions that host it, see our [Infrastructure](../tech/infrastructure.md) page and the service list in [Credits](../about/credits.md), which links to each vendor (including Hetzner).
|
| 102 |
102 |
|
|
| 103 |
103 |
|
For transfers of personal data from the EU/EEA to the United States, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission. Copies of our SCCs are available upon request at privacy@makenot.work.
|
| 104 |
104 |
|
|
| 34 |
34 |
|
## Production Stack
|
| 35 |
35 |
|
|
| 36 |
36 |
|
### Hetzner
|
| 37 |
|
- |
- VPS (US-West) + S3-compatible Object Storage
|
|
37 |
+ |
- Application server + PostgreSQL: VPS in US-West (Oregon)
|
|
38 |
+ |
- Object storage (S3-compatible), in the EU: user files in Germany, SyncKit blobs and OTA artifacts in Finland
|
| 38 |
39 |
|
- Backup: bucket versioning enabled
|
| 39 |
40 |
|
- Exit: standard S3 API, portable to any S3-compatible provider
|
| 40 |
41 |
|
|