Legal
Subprocessors.
MovingRated.com is operated by Aurum Transfers Limited (Jamaica). The named third parties below are the subprocessors Aurum uses to operate the MovingRated property, with purpose, data categories, location, and link to each provider's privacy policy. Last updated May 1, 2026. We do not share personal data outside this list.
Current subprocessors
| Provider | Purpose | Data categories | Location | Privacy policy |
|---|---|---|---|---|
| Supabase | Primary database, authentication, secrets vault. Stores subscriber records, partner records, /report submissions (encrypted at rest), editorial content. | Subscriber email, IP hash, /report submission contents (submitter email encrypted via pgcrypto) | United States (us-east-1) | supabase.com |
| Cloudflare | CDN, DNS, WAF, bot protection, edge cache, privacy-friendly aggregate Web Analytics beacon (cookieless, no fingerprinting). | IP address (ephemeral, used for security), pageview events (aggregate, no individual identifier) | Global edge network | cloudflare.com |
| Vultr | Hosting infrastructure (Dokku containers, application origin). | No direct subscriber data; receives request traffic from Cloudflare edge. | United States (Miami) | vultr.com |
| PostHog | Product analytics: pageviews, page-leave timing, Core Web Vitals. Configured cookieless and in memory-only persistence mode. Session recordings, heatmaps, click-level autocapture explicitly disabled. | Aggregate pageview events with no persistent identifier | United States | posthog.com |
| Sentry | Error monitoring (JavaScript errors during a visit). Session replay explicitly disabled. Events tunneled through movingrated.com/monitoring. | URL, error message, stack trace, browser/OS, country-level location. No screen recording or user input capture. | United States | sentry.io |
| Listmonk (self-hosted) | Email list management, double opt-in, unsubscribe, newsletter delivery orchestration. | Subscriber email, signup source, engagement events | Self-hosted on the same Vultr infrastructure as the main site | listmonk.app |
| SMTP relay (transactional email) | Outbound transactional email (lead-magnet delivery, /report verification, account email). | Recipient email, message content | United States | movingrated.com |
| Impact.com | Affiliate-network attribution. Tracks the click event when you click a link to an Impact-managed affiliate partner and the conversion outcome on the partner site. | Click event, network-side cookie or tracking parameter set by Impact, set on the partner landing page after redirect (not by MovingRated). | United States / global | impact.com |
| FlexOffers | Affiliate-network attribution for FlexOffers-managed partners. | Click event, network-side cookie set on the partner landing page after redirect (not by MovingRated). | United States | flexoffers.com |
| Rakuten Advertising | Affiliate-network attribution for Rakuten-managed partners. | Click event, network-side cookie set on the partner landing page after redirect (not by MovingRated). | United States / global | rakutenadvertising.com |
| CJ Affiliate (Commission Junction) | Affiliate-network attribution for CJ-managed partners. | Click event, network-side cookie set on the partner landing page after redirect (not by MovingRated). | United States / global | cj.com |
| GitHub | Source-code hosting and continuous integration. | No subscriber data. Receives no production user traffic. | United States | docs.github.com |
Notes
- Affiliate-network entries describe how the network tracks a click after the redirect leaves MovingRated. We do not pass your email, name, or any directly identifying data to the network or to the partner through our redirect; the network's tracking is set by the partner's landing page after you arrive there.
- We add new subprocessors only as needed to operate the site. Material additions will be reflected here and announced in the privacy policywith the "Last updated" date.
- For data-processing agreements, transfer-impact assessments, or U.K./EEA Standard Contractual Clauses, email [email protected].