Third parties

Document version 1.0. Reviewed 2026-10-05. Effective 2026-10-05. Native CMS revision and publication history are retained separately for this document.

Cloudflare: Workers runs the application, D1 stores structured records, R2 stores media, and platform security and logs support operation. Cloudflare Email Service sends transactional messages when enabled; Queues carries delivery events and the DLQ holds events that exceed the retry limit. These are infrastructure services, not a reader subscription platform.

Cloudflare’s customer DPA governs processing performed as processor or sub-processor on customer instructions and describes contractual transfer safeguards. Its privacy notice separately describes processing for its own purposes. We do not describe every provider activity as customer-directed processing or promise EU-only data locations.

Turnstile: Cloudflare processes browser signals for bot detection when the widget loads. Its Turnstile Privacy Addendum identifies Cloudflare as controller for signals used to improve bot detection. Turnstile must not be described only as a VendorClue subprocessor for all activities.

Google publisher and consent code is active on eligible public pages. GA4 and advertising serving remain disabled. The externally managed consent preview remains blocked despite bootstrap availability. Google’s controller terms apply to the listed publisher advertising services; provider policies explain their own processing. This is not a claim that site approval or visible consent has been verified. Any later analytics or advertising activation requires a separate review.

Payload CMS, Next.js, OpenNext and React Email are software used by the application. Their presence as dependencies does not mean reader information is sent to a separately hosted service operated by each project. Email is sent only through Cloudflare; no Resend SDK or service is used.

Supplier links open independent websites governed by those operators. No active affiliate network ingestion or verified public affiliate relationship is represented at this review. Review the destination’s terms before providing information or purchasing.

Provider references: https://www.cloudflare.com/cloudflare-customer-dpa/ ; https://www.cloudflare.com/privacypolicy/ ; https://www.cloudflare.com/turnstile-privacy-policy/ ; https://www.cloudflare.com/gdpr/subprocessors/cloudflare-services/ ; https://policies.google.com/privacy ; https://policies.google.com/technologies/partner-sites ; https://business.safety.google/adscontrollerterms/ . Provider documents can change; this document records the review date and requires a fresh review when activation or contractual scope changes.

Operator: IT SERVICES MAREK PIETKIEWICZ, Polish sole proprietorship, NIP 5542598947, REGON 341623872. Address: ul. Irysowa 16, 86-031 Osielsko, Poland. Jurisdiction: Poland. VendorClue is the service name of this operator.

Support and editorial corrections: support@magoflow.com. Privacy and data rights: privacy@magoflow.com. Legal notices: legal@magoflow.com.