Legal

Sub-processors

Last updated: October 6, 2026

The companies that process personal data for ListSpace.app on behalf of Sjenkie B.V., trading as Yellow House Digital. They may only use the data to provide their service to us.

Current sub-processors

ProviderWhat forDataWhere
Netcup GmbHOur server: the database, sign-in, the website and the APIAccount details, board content, technical data such as IP addressesGermany
Cloudflare, Inc. (R2)File storage, and the check of publicly visible images against known child sexual abuse materialUploaded files and imagesEuropean Union
Cloudflare, Inc. (Turnstile)Telling people from bots on sign-up, sign-in, password reset and content reportsIP address and browser detailsCloudflare network (may be outside the EU)
Cloudflare, Inc. (Email Routing)Receiving email sent to a board address, when that feature is enabledThe email and its attachmentsCloudflare network (may be outside the EU)
MXrouteSending email: account confirmations, password resets, daily due-date summaries, contact form messagesEmail address, and the content of the emailUnited States

Where a provider may process data outside the European Union, it offers standard contractual clauses for that transfer.

Run by us, not by a third party

  • Umami, which counts visits to the public pages without cookies, runs on our own server.
  • The sign-in service that AI assistants use to connect (oauth.yellowhouse.host) is run by Sjenkie B.V.

Services your browser contacts

Some content loads straight from another service, which then sees your IP address. They do not receive your boards or account details. Background photos you pick for a board load from Pexels. The tour video on the homepage loads from YouTube, in its privacy-enhanced mode, only when you press play.

Changes to this list

We update this page before a new sub-processor starts handling personal data. Business customers with a signed Data Processing Agreement get an email at least 30 days in advance, and can object by ending their use of the service.