Sou-pwosesè
Dènye mizajou: avril 2026
Anba GDPR Atik 28 ak lwa ki ekivalan, CoinKirin.com aji kòm kontwolè done.
Nou anonse nouvo sou-pwosesè omwen 30 jou anvan aktivasyon.
Sou-pwosesè aktif
| Provider | Service | Data processed | Location | DPA / SCC |
|---|---|---|---|---|
| Cloudflare, Inc. | DNS, CDN, DDoS protection, WAF, Turnstile (bot protection), Access (zero-trust tunnel) | IP addresses, user-agent, TLS metadata, request paths, Turnstile challenge tokens | US (global edge; EU PoPs available) | DPA + SCC (Module 2) |
| Resend (Raydium, Inc.) | Transactional email delivery (signup, password reset, security alerts) | Recipient email address, recipient name, email body content | US | DPA + SCC (Module 2) |
| Cherry Servers, UAB | Bare-metal server hosting | All CoinKirin data stored on rented hardware (database, logs, code) | US (Chicago) + EU (LT / NL fallback) | Standard hosting contract + SCC where applicable |
Planned / conditional sub-processors
The following are not currently engaged but are on our roadmap. We will announce activation 30 days in advance.
- MongoDB, Inc. (Atlas) — If we migrate from self-hosted MongoDB
- Grafana Labs, Inc. (Grafana Cloud) — If we migrate observability from self-hosted
- Anthropic, PBC — If/when AI / MCP features launch
Cross-border transfers
EU and UK user data may be transferred to the US via Cloudflare and Resend. These transfers are safeguarded by Standard Contractual Clauses (EU Commission 2021/914) and the UK IDTA where applicable. China user data falls under PIPL Art. 38; we obtain separate consent for cross-border transfer.
Not sub-processors
The following providers do not process user personal data and are therefore not listed as sub-processors: GitHub (code hosting only), npm / Go module proxy (dependencies), Let's Encrypt (TLS certificates), Docker Hub (image distribution).
Dwa pou opoze
Ou ka opoze yon nouvo sou-pwosesè nenpòt lè lè w ekri [email protected].
Kesyon
Pou nenpòt kesyon sou fason nou transfere oswa pwoteje done ou yo, ekri nan: [email protected].