TriviaTies Subprocessor List
The API Guys LLC d/b/a TriviaTies
Version: 1.0
Effective Date: 23 September 2026
This page lists the third-party service providers (“subprocessors”) that TriviaTies uses to operate the platform. We maintain this list for transparency and to comply with applicable data protection requirements.
Current Subprocessors
| Subprocessor | Purpose | Personal Data Processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud infrastructure (compute, database, object storage, email delivery) | All platform data, encrypted at rest and in transit | United States (us-west-2) |
| Stripe, Inc. | Payment processing, subscription management, customer portal | Customer email, name, organization name, payment method details, billing history | United States |
| Functional Software, Inc. (Sentry) | Application error monitoring and performance tracking | User email, user ID, username, IP address, browser information, request context | United States |
| GitHub, Inc. | Bug report and feature request hosting (feedback system) | Reporter username, organization name, subscription tier, browser information, console errors, page URL | United States |
| Discord, Inc. | Social authentication (OAuth) | OAuth profile data: username, email, avatar | United States |
| Meta Platforms, Inc. | Social authentication (OAuth) | OAuth profile data: name, email | United States |
| Google LLC | Social authentication (OAuth) | OAuth profile data: name, email, profile picture | United States |
| Google LLC | Web analytics (Google Tag Manager / Google Analytics 4) | Truncated IP address, device/browser identifiers, pages visited, session data, custom conversion events (no PII — name, email, user ID are never transmitted) | United States |
| Slack Technologies, LLC | Social authentication (OAuth), internal operational alerts | OAuth profile data: name, email; operational alerts: organization name, event type (no end-user personal data) | United States |
| HighLevel, Inc. (GoHighLevel) | Status-page subscriber notifications; and, for organizations that enable it, delivery of player marketing-consent records captured at trivia join to the organization’s CRM | Subscriber/player email, optional first name, opt-in/consent timestamp and record, consent channel and purpose | United States |
How We Select Subprocessors
We evaluate subprocessors based on their security practices, data handling policies, and compliance certifications. All subprocessors are bound by their respective data processing terms and privacy policies.
Changes to This List
We will update this page when subprocessors are added, removed, or their scope of processing changes. Material changes will be noted in the update history below.
Update History
| Date | Change |
|---|---|
| 2026-04-01 | Initial publication |
| 2026-04-03 | Added Google LLC (GTM/GA4) as subprocessor for web analytics |
| 2026-05-01 | Added HighLevel, Inc. (GoHighLevel) as subprocessor for status-page subscriber email |
| 2026-06-28 | Expanded GoHighLevel scope to player marketing-consent capture for participating organizations |
| 2026-09-23 | Published from tag-compliance, the source of truth for TAG legal instruments; no change to the list |
Questions
If you have questions about our subprocessors, contact us at privacy@triviaties.com.