Sub-processors

ShelfLife is operated by Fisherbird LLC. We use a small number of vendors ("sub-processors") to run the Service. Each processes personal data on our behalf under a written agreement that binds it to confidentiality and security obligations. This page mirrors Section 5.1 of our Privacy Policy.

Current sub-processors

• Amazon Web Services, Inc. — application hosting, database (DynamoDB), object storage (S3), authentication (Amazon Cognito), email delivery (Simple Email Service), and serverless compute (Lambda). Processing region: us-east-2 (Ohio, United States).
• 650 Industries, Inc. (d/b/a Expo) — push-notification delivery. When we send you a notification (such as a Book Signal response or a new follower), we pass a device push token and the notification's contents to Expo's push service, which relays it to Apple (APNs) or Google (FCM). United States.
• Cloudflare, Inc. — Cloudflare Turnstile, an anti-bot challenge used on our waitlist form, and Cloudflare Web Analytics, a cookieless pageview and referral analytics service used on our marketing site. United States.
• Functional Software, Inc. (d/b/a Sentry) — application error and crash monitoring for our web and mobile apps. When the app hits an error, a diagnostic report (error message, stack trace, app version, device/browser type, and the screen where it happened) is sent to Sentry so we can fix it. We configure Sentry not to collect your IP address and do not attach your account identity to these reports. United States.
• PostHog EU B.V. (d/b/a PostHog) — product analytics for our mobile and web apps (no session replay, no heatmaps, no autocapture). While you are signed in, events are labelled with an identifier we derive from your account by a one-way calculation, which PostHog cannot connect back to you; signed out, a random identifier is used. The web app still writes no cookies or browser storage for analytics. On our marketing site only, usage analytics plus session replay, heatmaps, and autocapture. Marketing-site visitors in the EU/EEA, UK, or Switzerland are asked for consent first; everyone else gets it by default and anyone who declines is counted with a cookieless, storage-free method instead. We do not send names, email addresses, account identities, book titles, review or comment text, search terms, waitlist survey responses, or form field contents. European Union.
• Open Library / Internet Archive — public book-metadata lookups. We send only a book identifier (such as an OLID or ISBN); we do not send any data that identifies you. United States.

Changes

We will give at least 30 days' notice of changes that materially affect the categories of data processed by our sub-processors. Questions: admins@theshelflifeapp.com.