Subprocessors
We use the following processors to deliver Match Royale. We will notify customers at least 30 days before adding or replacing a subprocessor on this list.
| Processor | Role | Region | Transfer basis |
|---|---|---|---|
| Supabase (Lovable Cloud) | Database, auth, storage, RPC | EU (Frankfurt) | DPA in place |
| Cloudflare Workers | Application hosting, edge | Global edge (EU primary) | DPA + SCCs |
| Paddle.com Market Ltd | Payments (Merchant of Record) | UK / global | UK adequacy + SCCs |
| Google LLC (OAuth) | Sign-in for hosts (optional) | USA | EU-US Data Privacy Framework |
| Apple, Google, Mozilla (Push) | Push notification delivery endpoints | Global | Operator of recipient device; no AVV available |
| Lovable AI Gateway | Trivia generation (optional) | EU | DPA in place |
| Mailgun (via Lovable Emails) | Transactional email delivery | EU region | DPA + SCCs |
Notification of changes
Customers can subscribe to subprocessor change notices by contacting privacy@getmatchroyale.com.
Last updated: 10 June 2026