vitalnodo

Trust center

Subprocessors

The providers that process data so that Vitalnodo works: what for, where and under what policy.

Last updated: October 29, 2026Version 1.2

This is an English translation. The Spanish version is the legally binding one. Leer en español

Providers that process data

These are the only providers that process personal data so that Vitalnodo can work. None of them uses the data for its own advertising purposes or receives it to sell it.

ProviderPurposeDataCountryPolicy
Cloudflare, Inc. Application hosting (Workers, Durable Objects), database (D1), storage of installers and icons (R2), delivery of service and alert emails, network, protection and recovery backups (30 days). All of the Service's data: accounts, technical machine data, alerts and the content and recipients of emails. USA (Eastern North America region) and global network Privacy · Data processing agreement
Gumroad, Inc. Payments for paid plans, as reseller and merchant of record: charging, receipts, taxes and refunds. Only the buyer's billing data (name, email, payment details you give it) and a random reference to your account. Never machine data. USA Privacy · Terms

If you pay with PayPal or another method within Gumroad's checkout, that payment method processes your data under its own policy, in its relationship with Gumroad. We don't receive card data or data about your payment account.

Browser notifications

If you turn on notifications on a device, the notification is delivered by your browser's push service: Google (Firebase Cloud Messaging) in Chrome, Edge for Android and other Chromium-based browsers; Apple in Safari; Mozilla in Firefox; and Microsoft in Edge for Windows. We don't choose them, your browser does, and they are only involved if you turn notifications on. The notification travels end-to-end encrypted: that service sees the delivery address, the time and the size, but it cannot read the content (the machine name and the type of alert). To remove them, use Settings › App & notifications or sign out on that browser. More in the Privacy policy.

Services we check without sending data

To know whether an operating system version is still supported, the Service downloads the public endoflife.date catalog once a day. No data about you, your account or your machines is sent in that request, so it is not a sub-processor.

What role they play

For technical machine data, Cloudflare acts as our sub-processor under the Data processing agreement (Annex III). Gumroad doesn't process that data: it sells you the subscription directly and processes your payment data under its own policy. That's why we list it here for transparency, even though it is not listed as a sub-processor in Annex III.

Changes to this list

If we add or replace a provider that processes data about your machines, we'll update this page and email the owner of each account at least 30 days in advance. During that period you can object on reasonable data protection grounds, as provided in the Data processing agreement.

For any questions: privacidad@vitalnodo.com.