The Spore Patch Ltd (trading as The Spore Patch) is the data controller for personal information collected through The Spore Oracle. The organisations below act as our data processors or independent controllers for the narrow purposes described. All international transfers are protected by the UK's International Data Transfer Agreement or the EU Standard Contractual Clauses.
We will notify subscribed users by email at least 14 days before adding a materially new subprocessor that has access to personal data.
| Service | Purpose | Data processed | Location |
|---|---|---|---|
| Lovable Cloud (Supabase, EU region) | Authentication, database, storage and server functions for accounts, saved readings and journal entries. | Email address, hashed password, display name, saved readings, journal notes, membership status. | European Union (Frankfurt) |
| Cloudflare, Inc. | Global content delivery, DNS and edge hosting for the website and server functions. | IP address, request metadata, standard web-server logs. | Global edge network; contract entity in the United States (with UK/EU Standard Contractual Clauses). |
| Stripe Payments Europe, Ltd. | Payment processing for digital downloads, memberships and gift codes. | Name, email, billing address, card details (held by Stripe — never by us), transaction history. | Ireland (with global processing). |
| Resend, Inc. | Transactional email delivery (receipts, download links, password resets, membership emails). | Email address, name, message content (receipts and system notifications). | United States (with UK/EU Standard Contractual Clauses). |
| Google LLC — Google Analytics 4 | Anonymous / pseudonymous website analytics. Loaded only after cookie consent is granted. | Pseudonymous client ID, page views, referrer, coarse device and country data. IP truncation enabled. | United States / EU (with UK/EU Standard Contractual Clauses). |
| Google LLC — Google Sign-In (OAuth) | Optional 'Continue with Google' sign-in. | Only the profile fields you approve on the Google consent screen (email, name, profile picture). | United States / EU. |
Questions or objections
If you have questions about any of the above, or wish to object to a specific transfer, write to us at hello@thesporeoracle.world. See our full Privacy Policy for your rights under UK GDPR.
Last updated: 5 July 2026.