Subprocessors
This page lists subprocessors — third parties that process personal data on behalf of MyColdKey LLC when we provide the Services. It supplements our Privacy Policy. We use vendors under appropriate confidentiality and security obligations where applicable.
This page may be updated as vendors change. Material changes that affect how personal data is processed will be reflected here and, where required by law, communicated through other reasonable means. This disclosure is not a substitute for a separate agreement you may have with MyColdKey (such as an enterprise contract or data processing addendum) where those instruments apply.
| Provider / category | Purpose | Data processed (summary) | Service area | Notes |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, APIs, object storage, and related infrastructure for accounts, licensing, optional Cloud+ ciphertext, and backend services. | Account, technical, and operational data; encrypted payloads and associated metadata as described in the Privacy Policy. | Primarily United States (AWS regions as configured); providers may process in other regions consistent with their practices. | Partially verified: Cognito (below) confirms use of AWS for authentication. Other AWS services may be used for hosting, storage, and APIs; this website repository does not enumerate every AWS product by name. |
| Amazon Cognito | Hosted sign-in, account verification, and session management for checkout and online accounts. | Identifiers (for example, email), authentication events, session tokens as applicable. | United States (per configured Cognito region/domain in config.js). |
Verified: Cognito Hosted UI domain and app client appear in config.js / config.local.example.js. |
| Stripe | Payment processing for checkout (when payments mode is Stripe). | Payment transaction data processed by Stripe; we receive order and payment confirmation metadata. | United States and other regions where Stripe operates. | Verified: MCK_PAYMENTS_MODE defaults to stripe in config.js; checkout integrates Stripe flows. |
| Formspree | Website form delivery (for example, waitlist submissions). | Fields submitted through forms (such as name and email). | United States and other regions where Formspree processes data. | Verified: waitlist form action points to formspree.io in index.html. |
| Vercel (or successor deployment) | Static site hosting and edge routing for the marketing website. | Typical web logs and request metadata; limited personal data incidental to hosting. | Global edge network; project configuration in repo (vercel.json). |
Verified: vercel.json present for redirects/hosting configuration. |
| Email delivery provider(s) | Transactional email (receipts, account messages, support routing). | Recipient address, message metadata, message content as applicable. | Where the provider operates. | Category; specific vendor not confirmed in this website repository. |
| Analytics provider(s), if enabled | Optional traffic and product analytics. | Device and usage data per provider policies; we intend not to use analytics to collect vault contents. | Where the provider operates. | Category; marketing pages include commented placeholder scripts only. |
| Logging, monitoring, and security tools | Service reliability, fraud prevention, and security monitoring. | Logs and security events that may include IP addresses, timestamps, and identifiers. | Typically United States; may include other regions. | Category; specific tooling not enumerated in this repo. |
| Fulfillment / logistics partner(s) | Manufacturing, engraving, packaging, and shipping for physical or titanium products where offered. | Name, shipping address, contact details, order identifiers, production or engraving specifications needed to fulfill the order. | Regions required to manufacture and deliver. | Category; partner identity may vary by program and region. |
For questions about this list: support@mycoldkey.com.