Sub-processors
Last updated: November 2026
What Are Sub-processors?
A sub-processor is a third-party company that OmniColor uses to process data on our behalf. Under GDPR Article 28, we must disclose all sub-processors and ensure that each has appropriate data processing agreements and security measures in place.
This page provides the complete list of every third-party service that may process data related to your visit to OmniColor. We commit to keeping this list current and complete.
Complete Sub-processor List
OmniColor uses exactly the following sub-processors. There are no hidden third parties.
Cloudflare, Inc.
Cloudflare Pages is our hosting and content delivery network. It serves the static HTML, CSS and JavaScript files that make up OmniColor.
| Purpose | Hosting, CDN, DDoS protection, edge security |
| Data processed | IP address, browser user-agent, URL, timestamp (standard web server logs) |
| Location | Global edge network (distributed data centers) |
| Safeguards | SOC 2 Type II, ISO 27001, EU-US Data Privacy Framework certified |
| Privacy | cloudflare.com/privacypolicy |
| Status | Essential — always active |
Adsterra
Adsterra is an advertising network that serves the display advertisements on OmniColor.
| Purpose | Advertising delivery and monetization |
| Data processed | IP address, user-agent, page URL, advertising cookies, browsing behavior (only if you opt in) |
| Location | Global (see their privacy policy) |
| Safeguards | Contractual data protection terms, industry-standard ad network security |
| Privacy | adsterra.com/privacy-policy |
| Status | Optional — only with consent |
Google LLC (AdSense)
Google AdSense serves additional advertising for OmniColor. Currently enabled only if you consent and if the integration is active.
| Purpose | Advertising delivery and monetization |
| Data processed | IP address, user-agent, page URL, DoubleClick cookies, browsing behavior (only if you opt in) |
| Location | United States (EU-US DPF certified) |
| Safeguards | EU-US Data Privacy Framework, Standard Contractual Clauses, ISO 27001 |
| Privacy | policies.google.com/privacy |
| Status | Optional — only with consent |
What We Do Not Use
For full transparency, here is what OmniColor does not use:
- No analytics providers (no Google Analytics, no Plausible, no Fathom)
- No CRM systems
- No email marketing platforms (no Mailchimp, no ConvertKit)
- No customer support platforms (contact is direct email)
- No payment processors (the site is free)
- No error tracking services (no Sentry, no Rollbar)
- No A/B testing platforms
- No chat widgets (no Intercom, no Drift)
- No CDN providers besides Cloudflare
- No social media tracking pixels (no Facebook Pixel, no Twitter Pixel)
Sub-processor Change Notification
If we add or remove any sub-processor, we will:
- Update this page with the change
- Announce the change on our homepage at least 30 days before it takes effect
- Notify registered users (if any existed — we have none currently)
If you have concerns about a sub-processor change, you may contact us at privacy@omnicolor.pages.dev.
Our Responsibilities as Data Controller
As the data controller, OmniColor:
- Selects sub-processors carefully based on reputation and security practices
- Ensures each sub-processor has a Data Processing Agreement (DPA) with us
- Reviews sub-processor security certifications periodically
- Remains fully responsible for data processed by sub-processors
- Ensures sub-processors comply with GDPR, CCPA and other applicable laws
Sub-processor Security Certifications
- Cloudflare: SOC 2 Type II, ISO 27001, PCI DSS Level 1, FedRAMP Moderate, HIPAA
- Adsterra: See their trust page for certifications
- Google: ISO 27001, ISO 27017, ISO 27018, SOC 1/2/3, PCI DSS, FedRAMP
Data Location Summary
Where your data is physically processed:
- Cloudflare: Distributed globally at edge; typically served from the nearest geographic location
- Adsterra: Global; see their privacy policy for details
- Google: Primarily United States
Contact
For questions about sub-processors or to request the full DPA for any sub-processor:
Email: privacy@omnicolor.pages.dev
Subject: "Sub-processor inquiry"
This page is reviewed quarterly to ensure accuracy. If you believe a sub-processor is missing from this list, please let us know.