Sub-processors and third parties

Last updated: October 18, 2026

These are all the companies outside Panoramr that our website, a tour or our servers talk to: what each one does for us, what it receives, when, and where it handles the data. This page is built from the same list that our Privacy Policy and Cookie Policy are checked against.

Some of them work for us and handle data only to provide a service to us, such as hosting and sending email. Others are services that your browser or our server uses, such as maps, videos and signing in with another account, and they handle what they receive under their own privacy policies.

The safeguard that protects data sent to each company outside the United Kingdom is being confirmed and will be shown here.

DigitalOcean

What it does for us: Hosting and file storage
What it receives: Our servers and the file store (the Space): every account, tour and file, and the IP address of every browser that fetches a file from the Space directly
When: Always
Where: Our servers in London, United Kingdom; the file store and its backups in the European Union, or an account's files in the region it chose on its Data location page (New York, London, Singapore or Sydney, where open) (DigitalOcean is a United States company)
Transfer safeguard: Being confirmed

Cloudflare (content delivery)

What it does for us: Content delivery, caching and protection; the pictures and hosting Workers
What it receives: Every request to our sites and pictures as it passes through: IP address, the address asked for, browser details; the visitor's country is read from its header
When: Always
Where: Cloudflare's data centre nearest the visitor, worldwide (Cloudflare is a United States company)
Transfer safeguard: Being confirmed

Cloudflare Turnstile

What it does for us: Telling people from programs on sign-up, sign-in after failed attempts, the forgotten-password form, contact, reporting, the plan and Vault account steps and starting a free tour
What it receives: IP address and details of the browser, on the forms that ask whether you are a person
When: Only when that feature is used: a form that asks whether you are a person (signing up, signing in after failed attempts, the forgotten-password form, contact, reporting, checkout, starting a free tour)
Where: Cloudflare's network, worldwide (Cloudflare is a United States company)
Transfer safeguard: Being confirmed

Stripe

What it does for us: Payments, subscriptions and the billing portal; TourHQ links to Stripe's dashboard
What it receives: Name, email address, billing address and payment details (on Stripe's own page), what was bought
When: Only when that feature is used: when you pay or manage billing
Where: United States, and other countries where Stripe works
Transfer safeguard: Being confirmed

Mailgun

What it does for us: Email delivery
What it receives: The address and content of every email we send
When: Always
Where: The European Union (our account is in Mailgun's EU region; Mailgun is a United States company)
Transfer safeguard: Being confirmed

GitHub

What it does for us: Fixing faults
What it receives: Error reports without the account number, as private issues
When: Always
Where: United States
Transfer safeguard: Being confirmed

Google Analytics

What it does for us: Seeing how the platform is used
What it receives: The address and title of each page viewed, the account's number and plan if signed in, its cookies
When: Only with your consent: a yes to analytics in the cookie banner
Where: United States, and other countries where Google has data centres
Transfer safeguard: Being confirmed

Google Maps

What it does for us: The maps, while our monthly allowance of Google's maps lasts; a link that opens a place in Google Maps
What it receives: IP address and which part of the map is shown; the server's signed map pictures
When: Only when that feature is used: a page with a map; a tour's map only when opened
Where: United States, and other countries where Google has data centres
Transfer safeguard: Being confirmed

Google Places

What it does for us: Suggesting the business a tour is of
What it receives: The words typed into the Street View tab's business search, from our server with our key
When: Only when that feature is used: a search on the Street View tab
Where: United States, and other countries where Google has data centres
Transfer safeguard: Being confirmed

Google Fonts

What it does for us: A font picked in a tour's design that we do not keep ourselves (the website's and the player's fonts are ours)
What it receives: The visitor's IP address
When: Only when that feature is used: only a tour whose design uses a font that we do not keep ourselves
Where: United States, and other countries where Google has data centres
Transfer safeguard: Being confirmed

Google Street View Publish

What it does for us: Publishing panoramas to Street View when the owner asks
What it receives: The panorama, its position and the tour's Google place; we keep the Google account's number, email and access (encrypted) until Disconnect
When: Only when that feature is used: connecting a Google account on the Street View tab
Where: United States, and other countries where Google has data centres
Transfer safeguard: Being confirmed

What it does for us: Signing up and in without a password of ours (only the providers whose keys are set are offered)
What it receives: Name, email address, the account's number with them and (Google, Facebook) the address of the profile picture, which we copy once
When: Only when that feature is used: choosing to sign in with one of them
Where: United States, and other countries where Google, Meta (Facebook) and Microsoft have data centres
Transfer safeguard: Being confirmed

YouTube

What it does for us: A YouTube video in a tour
What it receives: After play (or a yes to embedded video): the visitor's IP address and its own cookies. Before play nothing: the picture is our copy, fetched once by our server
When: Only when that feature is used: play, or a yes to embedded video; our server fetches the picture when the video is added
Where: United States, and other countries where Google has data centres
Transfer safeguard: Being confirmed

Vimeo

What it does for us: A Vimeo video in a tour
What it receives: After play (or a yes to embedded video): the visitor's IP address and its own cookies
When: Only when that feature is used: play, or a yes to embedded video
Where: United States
Transfer safeguard: Being confirmed

OpenFreeMap

What it does for us: The free maps (when Google's are not shown)
What it receives: IP address and which part of the map is shown
When: Only when that feature is used: a page with a map; a tour's map only when opened
Where: The European Union (OpenFreeMap is run by a Hungarian company), through Cloudflare's network
Transfer safeguard: Being confirmed

OpenStreetMap

What it does for us: The map tiles on a device that cannot draw OpenFreeMap's maps; the map's credit links
What it receives: IP address and which part of the map is shown
When: Only when that feature is used: a page with a map, on a device that cannot draw OpenFreeMap's maps
Where: A content delivery network, worldwide (the OpenStreetMap Foundation is in the United Kingdom)
Transfer safeguard: Being confirmed

Photon (komoot)

What it does for us: Suggesting places
What it receives: The words typed and a rounded position, from our server, without who asked
When: Only when that feature is used: asking for places
Where: Germany (komoot is a German company; photon.komoot.io runs on Hetzner's servers there)
Transfer safeguard: Being confirmed

Have I Been Pwned (Pwned Passwords)

What it does for us: Refusing a password that has been in a breach (live and staging only)
What it receives: The first five characters of a password's SHA-1 hash, from our server
When: Only when that feature is used: choosing a password
Where: Cloudflare's network, worldwide (the service is run from Australia)
Transfer safeguard: Being confirmed

jsDelivr and cdnjs (TourHQ only)

What it does for us: TinyMCE (the rich-text editor) and the flag icons of TourHQ's email templates, pinned to their versions
What it receives: The IP address of a member of staff opening TourHQ's rich-text editor; no visitor's
When: Only when that feature is used: staff only, in TourHQ
Where: Content delivery networks, worldwide
Transfer safeguard: Being confirmed

Questions

If you would like to know more about any of these companies or the safeguards we use, write to us at moc.rmaronap@tcatnoc.