ChronticThird parties who may process data on our behalf
Last Updated: September 7, 2026
Chrontic uses a small number of third-party services ("subprocessors") to help operate the Service. Some are used for every account; others only activate if you or your admin choose to connect that integration. This list is referenced by our Data Processing Agreement.
We will announce any addition or replacement of a subprocessor on this page at least 30 days before that subprocessor begins processing your data. To be notified by email when this list changes, write to support@chrontic.com. You may object to a new subprocessor on reasonable data protection grounds within that 30-day period, as described in Section 5 of the Data Processing Agreement.
| Subprocessor | Purpose | Data Processed | Processing Location | When Active |
|---|---|---|---|---|
| Hetzner Online GmbH Germany | Hosting of the Chrontic application, database, and backups | All data stored in the Service | Germany (Falkenstein) — EU | All accounts |
| Zoho Corporation B.V. Netherlands | Sending transactional email (invitations, password resets, notifications) | Recipient name and email address, message content | EU data centre | All accounts |
| Functional Software, Inc. (Sentry) United States | Error monitoring — server-side error reports used to diagnose faults | Error messages and technical context, which may include a user ID or email address appearing in the failing request | EU region (data stored in the EU); SCCs cover access by the US parent | All accounts |
| Stripe Payments Europe, Ltd. Ireland | Subscription billing and payment processing | Billing name/email, payment method details (we never see full card numbers) | EU, with transfers to the US under SCCs | All paid accounts |
| Google Ireland Limited Ireland | Sign-in ("Sign in with Google"); analytics if you accept our cookie banner | Name, email, profile picture; usage data, IP address and device information for analytics | EU, with transfers to the US under SCCs and the EU–US Data Privacy Framework | If you sign in with Google, or visit our website (see the Analytics note below) |
| Atlassian (Jira) Australia / Netherlands | Optional Jira integration — linking time entries to tickets, syncing worklogs | Jira ticket IDs, titles, and worklog data | Per your own Atlassian agreement; transfers under SCCs | Only if your admin connects Jira |
| Microsoft Ireland Operations Limited Ireland | Optional Outlook calendar integration | Calendar events and metadata | EU, with transfers to the US under SCCs and the EU–US Data Privacy Framework | Only if you connect Outlook |
| Tempo Iceland (EEA) | Optional Tempo integration — syncing worklogs with Jira accounts | Worklog entries, Jira account mappings | Per your own Tempo agreement | Only if your admin connects Tempo |
Google Analytics only stores cookies on your device if you accept our cookie banner. However, the Google Analytics script itself is loaded when you open the page, before you answer the banner — which means Google receives your IP address and browser information on that first page view whether or not you go on to accept. If you decline, no cookies are set and no identifier is stored on your device, but that initial connection to Google has already happened. We rely on Art. 6(1)(f) GDPR for it; you can object at any time by writing to support@chrontic.com.
Chrontic's own infrastructure — the application, the database, backups, and error monitoring — is hosted in Germany and the EU. Where a subprocessor transfers personal data outside the EU/EEA, the "Processing Location" column above names the mechanism relied on: the Standard Contractual Clauses adopted under European Commission Implementing Decision (EU) 2021/914, and/or the provider's certification under the EU–US Data Privacy Framework. You can request a copy of the relevant safeguards by writing to support@chrontic.com. See our Privacy Policy for more detail.
If you have questions about a subprocessor or want to be notified of changes to this list, contact us at support@chrontic.com.