Last updated:
What this page is
A subprocessor is a company we use to help run Athlema that handles personal information for us. For example, a company that hosts our database or sends our emails is a subprocessor.
Each subprocessor may use personal information only to provide its service to us, under a contract that limits how it can use the information. We publish this list so that players and organizers can see who handles their information, what for, and where.
This list goes with our Privacy Policy. For organizers, it is also the list of subprocessors that may handle the information organizers put into Athlema under our Organizer Agreement.
Changes to this list
At least 30 days before a new subprocessor starts handling organizer data, we will update this page and email the owners and admins of every organization, as our Organizer Agreement promises. An organization can object to a new subprocessor as the Organizer Agreement explains.
In an emergency, for example when we must replace a provider quickly to keep Athlema running or secure, we may add one sooner. We will then update this page and email organization owners and admins as soon as we can.
Anyone else who wants an email when this list changes can ask at privacy@athlema.com.
Our subprocessors
| Provider | What we use it for | Information it handles | Location |
|---|---|---|---|
| Supabase (hosted on Amazon Web Services) | Database, sign-in, real-time chat delivery, file storage | All account and platform data, including sign-in data (password hashes and session tokens) | United States |
| Amazon Web Services | Servers for our API, background jobs, cache, permission service, and encrypted audit archive | All account and platform data while it is processed or sent; audit records | United States |
| Vercel | Hosting athlema.com and hub.athlema.com | Web requests, including IP addresses | United States, with a global network of edge servers |
| Resend | Sending emails, and storing the waitlist | Email addresses, names, the content of emails, and waitlist entries | United States |
| Sentry | Error and performance monitoring | Technical data about errors and a small sample of requests, pseudonymous IDs; IP addresses may be processed. Typed search text and location coordinates are removed before sending | United States |
| Geoapify | Suggesting cities and addresses while you type | The text typed into a search box, sent from our servers and not linked to you | European Union (servers may be global) |
| Geocodio | Turning organizer and venue addresses into map coordinates | Business and venue addresses | United States |
| Anthropic | Optional AI tools for organizers: drafting rulebooks and waivers, and tidying program descriptions | The text an organizer types or pastes into the tools. A program description may include contact details the organizer adds, such as a contact name, email address or phone number | United States |
Independent partners
These companies work with us but are not our subprocessors. They decide for themselves how they use the information they receive, under their own privacy policies or terms.
| Partner | Role | Their privacy policy |
|---|---|---|
| Stripe | Independent controller for payment processing: card payments, refunds, payouts to organizers, subscriptions and fraud prevention | https://stripe.com/privacy (opens in a new tab) |
| Apple | Sign in with Apple, if you choose it | https://www.apple.com/legal/privacy/ (opens in a new tab) |
| Sign in with Google, if you choose it, and maps in the Athlema app (Google Maps). Your phone sends map requests, including its IP address, to Google | https://policies.google.com/privacy (opens in a new tab) |
Other services your browser or email app contacts directly
Some pages and emails load content straight from another company. That company then sees your IP address and the request, and handles it under its own terms.
| Service | What it does | What it receives |
|---|---|---|
| MapTiler | Map images in the hub | Map requests from your browser, including your IP address and the map area you view |
| OpenFreeMap | Map images in the hub | Map requests from your browser, including your IP address and the map area you view |
| Google Fonts | Fonts in some of our emails, loaded when you open the email | Your IP address and that a font was requested |
Questions
Write to privacy@athlema.com.
See all of Athlema’s policies on the Legal page.