Service providers · v0.2-beta
Service providers — 短.在线
Version: v0.2-beta
Last updated: 2026-09-17
Controller: Arasaka Oy (Business ID 2138210-8), Santaradantie 7 F 203, 01370 Vantaa, Finland
Language: English is controlling. A Simplified Chinese courtesy translation is available at zh/SERVICE_PROVIDERS.md.
This page lists service providers, processors and other recipients that may process personal data in connection with the 短.在线 Service operated by Arasaka Oy. It supports our Privacy Policy.
Customer URL: /legal/service-providers (legacy /legal/subprocessors redirects here).
We update this list when we add or remove a provider. Material changes may also be noted in-product or by email where required.
How to read “GDPR role”
| GDPR role | Meaning (summary) |
|---|---|
| Processor | Processes personal data on our documented instructions (Art. 28 GDPR) |
| Independent controller / joint | Determines purposes/means itself (or jointly); not solely our processor |
| Controller tooling (self-hosted) | Software we operate ourselves on infrastructure already listed — not a separate third-party processor entity |
| Not yet engaged | Named for transparency; processing starts only when the feature is enabled in production |
These classifications are operational working labels. Finnish/EU counsel may refine them.
Currently engaged
| Provider | GDPR role | What they process / why | Typical region(s) | Notes |
|---|---|---|---|---|
| Vercel Inc. | Processor | Hosting and edge delivery for the web control plane; may process account, request, and log data | Global (often US + edge) | Production web application hosting |
| Cloudflare, Inc. | Processor | DNS, TLS, and related edge security for brand domains; may process IP and request metadata | Global | No Cloudflare China Network / mainland China ICP path for the current Service |
| Fly.io, Inc. | Processor | Hosting for redirect and related infrastructure (application + data stores we operate on Fly); may process redirect/visit and operational data | EU primary (possible additional regions later) | Includes hosts used for brand mail software (see Stalwart row) |
| Stalwart (mail software self-hosted by Arasaka Oy on Fly.io) | Controller tooling (self-hosted) | Inbound abuse and privacy mail for abuse@短.在线 and privacy@短.在线 | Brand domain / Fly region | Not a separate processor company. Not Google Workspace / Microsoft 365. Unicode display addresses; SMTP may use punycode |
| 101domain, Inc. | Processor | Domain registration and DNS account administration; registration contact and DNS-change metadata | Global | Registrar services. Registry/ICANN public WHOIS or similar disclosures, where required, are outside this processor table |
Infrastructure components we operate ourselves on Fly.io (for example application processes and databases) are part of our hosting arrangement with Fly.io, not additional brand-name processors beyond Fly.io.
Engaged when the feature goes live
| Provider | GDPR role | What / why | Notes |
|---|---|---|---|
| Stripe, Inc. (and Stripe payment entities as applicable) | Not yet engaged | Payments, subscriptions, invoices, billing identifiers | Activates when paid plans / checkout are offered (then: Processor) |
| Google LLC — Safe Browsing Lookup API | Not yet engaged | Destination URL threat lookups at create / re-scan; URL and related request metadata | Activates when the production integration is enabled (then: Processor). Until then, AUP/Privacy describe Safe Browsing as a tool we may use |
Optional error/uptime monitoring vendors will be added here only when engaged.
Not used for the Service
- Mainland China hosting, China Network CDN, or ICP-based acceleration (deferred)
- Sale of identifiable clickstreams to advertisers or data brokers
- “防红” / censorship-evasion vendors as a product feature
Contact
Privacy requests: privacy@短.在线
Abuse reports: abuse@短.在线
Controller: Arasaka Oy · Law / venue: Finland
Privacy: privacy@短.在线 · Abuse: abuse@短.在线