Subprocessors
Everything we store lives with one vendor, Amazon Web Services, in the United States. Two services touch data in passing: Google Workspace hosts our email, and Cloudflare Turnstile checks that a demo request comes from a person. Changes to this list are posted on this page.
| Service | What it does | Where |
|---|---|---|
| Amazon Cognito | Sign-in for parents and claimed accounts | us-east-1 (N. Virginia, USA) |
| Amazon Aurora (RDS) | Game, learning, account, and demo-request data | us-east-1 (N. Virginia, USA) |
| Amazon S3 | Stores the game files and site assets | us-east-1 (N. Virginia, USA) |
| Amazon CloudFront | Delivers pages and game files quickly | us-east-1 (N. Virginia, USA) |
| AWS Lambda | Runs the website and its services | us-east-1 (N. Virginia, USA) |
| Amazon API Gateway | Carries the game’s save-and-load traffic | us-east-1 (N. Virginia, USA) |
| Amazon DynamoDB | Brief, auto-expiring counters that protect the service from abuse | us-east-1 (N. Virginia, USA) |
| Amazon SES | Sends parent emails (account confirmation, demo invitations) | us-east-1 (N. Virginia, USA) |
| Amazon CloudWatch | Service-health logs (no personal profiles) | us-east-1 (N. Virginia, USA) |
| Google Workspace | Hosts our email: the messages you send us and our replies | Google data centers (mailbox hosting; data region not pinned) |
| Cloudflare Turnstile | Checks that a demo request on our studio site comes from a person; receives the device’s network address and browser signals for that check only | Cloudflare’s global edge (transient; nothing stored by us) |
How this data is handled is described in our privacy notice.