Sub-processors
A sub-processor is a provider that processes personal data on our behalf and on our instructions: a host, a mail sender. Each is bound by a contract that obliges it before it processes anything at all.
This page says who receives what. It carries a date, because a list like this is only ever true at a moment.
As at 2 September 2026.
Today, nobody receives any data
The site is not yet being served and the game is not open. No account exists, so no address has been handed to anyone, and no access log holds a visitor's IP.
We say so rather than publishing a present-tense list that describes a future state. The table below is the one that becomes true, provider by provider, at the moment each row names.
The providers, and when each begins to receive
| Provider | Role | What it receives | Where | Contract | From |
|---|---|---|---|---|---|
| OVHcloud | Hosting for this site | No account data. Its access log holds an IP address, as every web server's does | France | Signed | This site going live |
| Scaleway | Hosting for the game and its database | All account and game data | France | Signed | The alpha opening |
| Brevo | Sending the service's mail: sign-in codes, address-change notices, deletion confirmations | Your email address, and the subject and body of the message | France | Signed | The first sign-in code sent |
All three contracts were signed on 31 August 2026, before any processing, which is what the regulation requires.
The ones not on the list, and why they are named anyway
Apple (APNs) and Google (FCM) would carry notifications to an iPhone or an Android phone. They receive nothing today and they are not in the table, because notifications are not enabled and no transfer contract is in place for them.
They are named here regardless, for a plain reason: they appear in the privacy policy marked inactive, and a reader who met them there and could not find them here might reasonably think something had been left out. On the day notifications are enabled they move into the table above, and this page changes before the first token is sent.
A CDN is under consideration and is not deployed. Same rule: it joins the list on the day it serves a page, not before.
Being told when this changes
Write to contact@hexeon.io to be told when a sub-processor is added. Every change to this list is dated, and the version you were shown stays available.