Sub-processors
Last updated 2026-04-27.
This page lists the third parties (“Sub-processors”) that LMTS DEVELOPMENT LTD engages to provide the CloudBrowserAPI Service. We notify customers at least 30 days before adding a new Sub-processor that handles personal data, in line with our Data Processing Addendum.
Active sub-processors
| Vendor | Legal entity | Location | Purpose | Data categories |
|---|---|---|---|---|
| Cherry Servers | UAB Cherry Servers | Lithuania (EU) | Bare-metal hosting (server 89.124.117.37) for the marketing site, dashboard, gateway and mail server. | Account data, hashed passwords, API usage logs, mailbox contents, server logs. |
| Bunny.net | BunnyWay d.o.o. | Slovenia (EU) | Authoritative DNS for cloudbrowserapi.com and CDN/WAF for static assets. | Source IP, request URL, user agent. |
| Google Analytics 4 + Tag Manager | Google Ireland Limited | Ireland (EU) with onward transfer to the United States under SCCs. | Marketing-site traffic measurement and Google Ads conversion tracking. | Pseudonymous client identifier, anonymised IP, page-view metadata. |
| Let's Encrypt | Internet Security Research Group (ISRG) | United States (under SCCs). | Issuance of TLS certificates for cloudbrowserapi.com and subdomains. | Domain name, certificate request metadata. No customer personal data. |
Conditional / on-demand
Engaged only when a customer explicitly opts in to the corresponding feature flag.
| Vendor | Legal entity | Location | Purpose | Data categories |
|---|---|---|---|---|
| Stripe (planned) | Stripe Payments Europe Ltd. | Ireland (EU). | Payment processing once paid plans go live. Not active today. | Billing email, name, billing address, card token (Stripe-hosted; never received by us). |
| 2Captcha / CapSolver / AntiCaptcha | Various | United Kingdom, Hong Kong, Estonia. | CAPTCHA solving rotation. Engaged only for requests that pass `?solve=true`. | Challenge image / token, target URL. |
| Bright Data / Oxylabs / IPRoyal | Various | United Kingdom, Lithuania, Cyprus. | Residential proxy rotation. Engaged only for requests that pass `&proxy=residential`. | Target URL, anonymised request metadata. |
To subscribe to the change-notification list, email dpo@cloudbrowserapi.com with the subject “Sub-processor notifications”.