Who processes your data
In effect from 2 October 2026 Hydra Labs
The short version
These are the companies that touch data on FiveStaff's behalf. Each one does one job, and none of them is an advertising or analytics company. Live video and voice run on our own machine rather than through anybody else's service.
This box is a summary for convenience and is not part of the agreement. Where it and the wording below differ, the wording below is what applies.
The list
Current as of 2 October 2026.
| Who | What they do for us | Where |
|---|---|---|
| OVHcloud | The servers FiveStaff runs on, and the database your records live in. | European Union |
| Cloudflare | DNS, and the layer in front of our websites that absorbs attacks. Sees requests in transit; stores no records for us. | Global, under the UK addendum to the standard contractual clauses |
| Google Cloud Storage | Where evidence files and database backups are kept, encrypted. | European Union, with the UK addendum for support access |
| Stripe | Takes subscription payments. Holds the card details; we never see them. | Ireland and the United States, under the standard contractual clauses |
| Resend | Sends the emails the service has to send — alerts, notices, billing. | United States, under the standard contractual clauses |
| Discord | Signing in, and delivering the bot's messages to your own Discord server. | United States, under the standard contractual clauses |
| Expo | Passes push notifications to Apple and Google for delivery to the mobile apps. | United States, under the standard contractual clauses |
| Anthropic | Only when a server owner chooses to have an unfamiliar framework set up automatically: works out where that framework keeps its characters from the layout of the game database and a few masked examples, each time the owner asks, with a second look if the first answer does not hold up. Player names and identifiers are hidden before anything is sent. | United States, under the standard contractual clauses |
| Apple and Google | The push services on each phone platform. They carry the notification itself. | United States, under the standard contractual clauses |
What is not on this list, and why
Live view and calls run on our own media server. The video of a player's game and the audio of a staff call are handled by software we host on hardware we rent, not by a third-party video service. Nobody else is in that path.
There is no analytics company on this list. We run none on this website and none in the panel, so there is no row for one.
Your game server's own database is yours. FiveStaff reads the framework data it is pointed at; that database is on your machine, under your control, and is not something we store on your behalf.
Changing the list
If we add a company that handles your players' data, we will update this page and tell account holders by email at least 30 days before it starts, so there is time to object. If you object on reasonable data-protection grounds and we cannot resolve it, you may cancel and we will refund the unused part of what you have paid.
Questions, or a copy of the terms we have with any of these: open a ticket in our support Discord .
Last updated 2 October 2026. Previous versions are available on request in our support Discord .