Sub-processors

Last updated 21 October 2026

These are the third parties that process personal data on our behalf to run the Site and Mailstream, what they receive and where. Business customers under the Data Processing Agreement are told about changes at least 30 days in advance. The mail, calendar and contact providers you connect to Mailstream (Google, Microsoft, Apple, your IMAP provider) are not on this list: you choose them, they hold your data under their own terms, and Mailstream acts on it only at your request.

MacStadium, Inc.

Purpose: hosting of Mailstream’s servers and database, and of their encrypted backups.

Data: all Mailstream data (section 3 of the Privacy Policy).

Location: data centre in Ireland (EU); MacStadium, Inc. is based in the United States.

Cloudflare, Inc.

Purpose: DNS, content delivery and protection for leucojum.com and mailstream.leucojum.com (traffic reaches Cloudflare encrypted and is decrypted there to be forwarded); forwarding of email sent to leucojum.com addresses; once off-site backups start, storage of encrypted backup copies in Cloudflare R2.

Data: what is exchanged with the Site and Mailstream in transit; the email you send us; encrypted backups.

Location: worldwide network; R2 in the EU jurisdiction. Transfers: EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

Akamai Technologies, Inc. (Linode)

Purpose: hosting of the Site and of the Hartwell Bridge sign-in service.

Data: Site visitors’ technical data; Mailstream users’ sign-in account (email address, name and sign-in credentials).

Location: Frankfurt, Germany (EU); Akamai Technologies, Inc. is based in the United States.

Google LLC — Google Cloud Pub/Sub

Purpose: tells Mailstream when a connected Gmail mailbox changes.

Data: the mailbox’s email address and a change number; no message content.

Location: Google’s global infrastructure. Transfers: EU-U.S. Data Privacy Framework.

Google LLC — Gmail

Purpose: the mailbox that receives email sent to leucojum.com addresses (such as support@ and info@).

Data: the email address and content of the messages you send us.

Location: Google’s global infrastructure. Transfers: EU-U.S. Data Privacy Framework.

Browser push services

Purpose: delivering Mailstream’s notifications to the browsers where you turn them on, through the service the browser uses: Google (Chrome, Brave, Android), Mozilla (Firefox), Apple (Safari), Microsoft (Edge).

Data: an identifier of the browser’s subscription and the notification, encrypted by Mailstream for that browser: the push service cannot read it.

Location: each provider’s infrastructure, worldwide.