Sub-processors

A sub-processor is another company that handles personal data for MonoAdmin so that MonoAdmin can run. This is the list that the Data Processing Addendum refers to. It lists every outside service that handles personal data for MonoAdmin.

The List

Sub-processor	What it does for MonoAdmin	Data it handles	When
Cloudflare	DNS, a content delivery network and hosting for this website and the panel. The network proxy (and tunnel) that carries traffic from our API, game gateway and webhook addresses to our servers, and that delivers stored files from Backblaze at cdn.monoadmin.net. Turnstile, the bot check on sign-in, sign-up, password reset and whitelist application pages.	Web requests (network address, browser, address requested). Everything that passes between the panel, a customer’s game server and our servers, which includes player data in transit, and stored files as they are opened. For Turnstile, a challenge token and the visitor’s network address.	Always
Backblaze	File storage (Backblaze B2, in the United States).	Screenshots, report attachments, the files and transcripts of Discord tickets, and txAdmin files uploaded for an import, until they are deleted.	Always
Discord	“Continue with Discord” sign-in, the ticket bot, direct messages, member search and profile pictures.	For sign-in, the profile Discord gives us. For tickets, the ticket messages, files and transcripts, and Discord IDs. For messages, the text of the notice. For profile pictures, the Discord ID of a player who has one and no face picture, to read their public profile and avatar.	Always for profile pictures, for players with a Discord ID and no face picture. The other uses only when a customer or user uses a Discord feature
Valve (Steam Web API)	Fetching the public profile picture of a player by Steam ID.	The Steam IDs of players who have no face picture and no Discord picture.	Only when MonoAdmin has it set up, for players that need a picture
Sentry	Error reports (Sentry is run by Functional Software, Inc., in the United States). A report is sent when something fails in the panel, on this website, on MonoAdmin’s servers or in the resource on a customer’s game server.	The error message and its stack trace, the page address without anything after a ? or # (the secret part of a link, such as a password reset, is replaced), the type of browser and system, and MonoAdmin’s version. For an error in the panel, on our servers or in the resource, also the project’s number, and for the resource the versions of the resource and the framework. The resource reports only MonoAdmin’s own failures, never player names, identifiers or chat. MonoAdmin attaches no account, email address or player name to a report. Sentry does not store IP addresses, or the place it would work out from one. Reports are kept for up to 90 days.	Always
Server hosting	The data centre company whose servers MonoAdmin rents to run the service.	The data MonoAdmin stores: accounts, projects and player data.	Always

Independent Providers

Tebex sells paid plans to you as reseller and merchant of record. It is not a sub-processor and handles no player data: it uses your payment data for itself and is responsible for it under its own privacy policy. When an owner starts a checkout, MonoAdmin sends Tebex the plan, the project, a checkout token, the addresses to return to and your network address. Tebex also hands out the free package the resource is claimed with, on its own store pages; MonoAdmin sends it nothing for a claim. MonoAdmin receives from Tebex the payment details listed in the Privacy Policy.

Run by MonoAdmin Itself

These are not sub-processors, because MonoAdmin runs them itself:

• Email. Our service emails are sent from a mail server that MonoAdmin runs. The mail providers of the people we write to handle the message after that, as with any email.
• The relay for the Player Monitor. The relay that carries live views of a player’s game is run by MonoAdmin.
• The databases. Postgres with TimescaleDB, and ClickHouse for Server Logs, are run by MonoAdmin.

Receives No Personal Data

DB-IP. MonoAdmin downloads a free file of IP address locations from DB-IP once a month and looks addresses up on its own servers. No address or other personal data is sent to DB-IP. The panel shows the credit that DB-IP’s licence asks for: “IP Geolocation by DB-IP”.

Changes to This List

MonoAdmin posts a new sub-processor, or a change to what one does, on this page and emails the project owners at least 14 days before it starts to handle customer data. The date at the top shows when the list was last changed. A customer who objects can write to hello@monoadmin.net within that time. The Data Processing Addendum says what happens next.