To operate NextOath, we rely on a small number of third-party service providers ("subprocessors"). Each subprocessor only receives the information needed to perform its function for us, and is bound by its own privacy and security obligations.

Current Subprocessors

Google Firebase Authentication — authentication and user session management.
Convex — backend functions, real-time database, and serverless infrastructure.
Google Cloud (Cloud Run) — frontend hosting.
Google LLC (Google Analytics) — product analytics and usage measurement. Loaded only after the user accepts analytics cookies via our consent banner. See our Cookie Policy for opt-out controls.
Stripe — payment processing for credit purchases.
Postmark — transactional email delivery (turn nudges and account notices).
Google AI (Gemini API) — AI model inference for game content generation.

What We Share With Each

Data shared is limited to what each subprocessor needs:

Authentication: account identifiers and session tokens.
Backend and hosting: account identifiers, game state, and any data you submit through the Service.
Analytics: pages visited, browser and device information, approximate location, session activity, and general usage patterns. User-generated narrative and game content is not intentionally sent to analytics providers.
Payments: account identifiers and the credit pack selected. Cardholder name, billing address, and payment details are collected by the payment processor directly on its hosted checkout page; we do not receive or store card numbers.
Transactional email: your email address, display name if used in the message, and the contents of the messages we send.
AI processing: parameterized game inputs (such as world-building answers and strategic actions). We do not intentionally send account identifiers, email addresses, or other directly identifying personal information to AI providers.

Changes to This List

We may add, remove, or replace subprocessors from time to time as our infrastructure evolves. Material changes will be reflected by updating this page and the "Last updated" date above.

Contact

For questions about our subprocessors, contact us at nextoath@alternatethread.com.