Sub-processors

ShelfLife is operated by Fisherbird LLC. We use a small number of vendors ("sub-processors") to run the Service. Each processes personal data on our behalf under a written agreement that binds it to confidentiality and security obligations. This page mirrors Section 5.1 of our Privacy Policy.

Current sub-processors

• Amazon Web Services, Inc. — cloud infrastructure and platform services, such as application hosting, database (DynamoDB), object storage (S3), authentication (Amazon Cognito), email delivery (Simple Email Service), and serverless compute (Lambda). Processing region: us-east-2 (Ohio, United States).
• 650 Industries, Inc. (d/b/a Expo) — push-notification delivery. When we send you a notification (such as a Book Signal response or a new follower), we pass a device push token and the notification's contents to Expo's push service, which relays it to Apple (APNs) or Google (FCM). United States.
• Cloudflare, Inc. — Cloudflare Turnstile, an anti-bot challenge used on our web app's signup form, and Cloudflare Web Analytics, a cookieless pageview and referral analytics service used on our marketing site. United States.
• Functional Software, Inc. (d/b/a Sentry) — application error and crash monitoring for our web and mobile apps. When the app hits an error, a diagnostic report (error message, stack trace, app version, device/browser type, and the URL of the screen where it happened) is sent to Sentry so we can fix it. We configure Sentry not to collect your IP address and do not attach your account identity to these reports. United States.
• PostHog EU B.V. (d/b/a PostHog) — product analytics for our mobile and web apps (no session replay, no heatmaps, no autocapture). While you are signed in, events are labelled with an identifier we derive from your account by a one-way calculation, which PostHog cannot connect back to you; signed out, a random identifier is used. Changes to a Box Seat membership (started, renewed, canceled, ended, refunded, or switched plan) are sent from our servers under the same identifier, without price or payment details. The web app still writes no cookies or browser storage for analytics. On our marketing site only, usage analytics plus heatmaps and autocapture, with no session replay. Marketing-site visitors in the EU/EEA, UK, or Switzerland are asked for consent first; everyone else gets it by default and anyone who declines is counted with a cookieless, storage-free method instead. We do not send names, email addresses, account identities, book titles, review or comment text, search terms, or form field contents. European Union.
• RevenueCat, Inc. — subscription management for Box Seat in our iOS and Android apps and on our website. If Box Seat is offered to you in our apps or on our website, RevenueCat receives your ShelfLife account identifier, your store country, basic device and app details (such as app version and operating system) and your IP address, and, if you buy Box Seat, your purchase and subscription records from Apple, Google or Paddle (such as the plan, price, and renewal dates), and tells us whether your membership is active. If you buy Box Seat on our website, RevenueCat also receives your email address from Paddle as part of the purchase record. We do not send RevenueCat your reading activity, and it never receives your payment card details. United States.
• MailerLite, Inc. — newsletter delivery. If you opt in to the ShelfLife newsletter, we give MailerLite your email address and when and where you opted in, and it sends the newsletter on our behalf. MailerLite records whether each newsletter was delivered, opened, or clicked, and handles unsubscribes. Nobody who has not opted in is added, and we do not send MailerLite your reading activity. European Union (the Netherlands).
• Open Library / Internet Archive — public book-metadata lookups. We send only a book identifier (such as an OLID or ISBN); we do not send any data that identifies you. United States.

Box Seat bought on the ShelfLife website is sold by our reseller Paddle (Paddle.com Market Limited, or Paddle.com Inc. for buyers in the United States and Paddle.com (Canada) Ltd. for buyers in Canada). Paddle is not listed above because it is not our sub-processor: it is an independent controller of the payment information it collects, under its own Privacy Notice. Section 5.1 of our Privacy Policy describes what it receives.

Changes

We will give at least 30 days' notice of changes that materially affect the categories of data processed by our sub-processors. Questions: admins@theshelflifeapp.com.