Carbon Hosting sub-processor list
Document date: 2026-10-16
Version date: 2026-10-16
The operator uses a small set of sub-processors to run the service. What each one processes and why sits below. How long the operator keeps the data it holds follows the Privacy Policy retention table.
Payment processor
- Role: payment provider.
- Data categories: your payment method details are entered and held by our payment processor when you pay, and the operator receives payment status records (paid, failed, refunded, in dispute) and order and billing identifiers needed to run accounts.
- Purpose: taking payments, issuing refunds, and handling payment disputes exactly as the Terms of Service refund chapter provides.
- Retention: what the operator holds follows the Privacy Policy retention table (the billing and invoice records row there: kept for 7 years). The payment processor's own handling of payment data is governed by the payment processor as the payment provider.
Email delivery provider
- Role: transactional and business email delivery.
- Data categories: email addresses and the content and delivery records of the transactional and business email the operator sends (for example the order, invoice, suspension, and deletion notices the Terms of Service provide for).
- Purpose: delivering the operator's email.
- Retention: aligned with the Privacy Policy retention table (the email records row there: kept for 7 years).
DNS and proxy protection provider
- Role: DNS and protective proxy in front of the public site.
- Data categories: domain name service data, IP addresses, and request metadata needed to route, protect, and deliver the websites.
- Purpose: DNS, protection, and delivery of the public site.
- Retention: aligned with the Privacy Policy retention table (the server and access logs row there: kept for 7 years).
Hosting provider
- Role: the dedicated hosting provider whose single node runs the platform (the server panel, the website, and the game servers).
- Data categories: server content and backups, the platform's records and databases, and server and access logs.
- Purpose: hosting the platform the service runs on.
- Retention: aligned exactly with the Privacy Policy retention table: the non-payment deletion 7 days after suspension, the cancellation retention of 7 days, and the chargeback export window then deletion.
Where the sub-processors serve from (transfer basis)
The operator does not currently offer the service to customers in the EU or the UK. The sub-processors serve from their own operations. The specific transfer mechanisms that would apply are not decided in these documents; they are confirmed before any EU or UK enablement, together with a dedicated review before any cross-border marketing, EU or UK currency display, or EU or UK enablement in our payment checkout.