Subprocessors · last updated 14 October 2026
Who else touches the data.
Anthropic
What it does: writes the question sets, sorts a topic before a set is written, writes out the text of a PDF or an image you upload, and writes the answer suggestions a speaker sees in a Q&A.
What it receives: the topic, the room settings, any text you paste, and the extract from a file — or, for a PDF or an image, the file itself, after we remove its location, camera and author fields (see privacy). Never anything about players. For a Q&A: the pages the speaker kept, the topics the speaker blocked, and each question from the room, never who asked. It holds the pages in a temporary cache for up to one hour after the last question.
Where: our contract is with Anthropic Ireland Limited. The processing happens at Anthropic in the United States and with its cloud providers, outside Norway East where the rest of the service runs. Its data processing addendum covers transfers with the EU standard contractual clauses and does not name a region. Anthropic was not on the EU–U.S. Data Privacy Framework list on 4 October 2026.
How long: Anthropic says it deletes what we send, and what it writes back, within 30 days. A request its safety systems flag as breaking its usage policy may be kept for up to two years.
Training: its commercial terms say it may not train models on customer content.
Commercial terms · Data processing addendum · Anthropic's own subprocessors
Microsoft Azure
What it does: runs the server, keeps the logs and holds the files we store (Microsoft Azure Storage). It also sends the confirmation a host gets by e-mail for each purchase and refund, and the Friday quiz e-mails to those who signed up for them. It also stores the registrations an organiser takes for an event, and sends the ticket by e-mail to the person who registered.
What it receives: every connection to the site and the game, and the log lines described on privacy, kept for 30 days. In storage: a game while it runs, the events and rounds a signed-in host saves, a subscriber's Friday quiz settings, company name and logo, the stars and comments given after a game, the e-mail addresses signed up for the Friday quiz, and our copy of each confirmation and credit note. What each of these holds and for how long is on privacy. For a confirmation e-mail: the host's e-mail address and name, and the text of the confirmation. For a Friday quiz e-mail: the subscriber's address, the language and the text. For a registration: the name, the e-mail address and the ticket type, and for the ticket e-mail the address and the text. Anthropic does not receive registrations.
Where: the Norway East region. E-mail data is kept at rest in Norway.
Stripe
What it does: takes a host's payment card and charges it for Q&A, the pack of 100 questions and the subscription, and for the event package. Outside Norway, Link, a Stripe company, sells the subscription and the pack as the seller to the buyer (see privacy). Only a host who signs in and adds a card is involved; players never are.
What it receives: the card details, typed on Stripe's own page and never on klapp. From us: the host's e-mail address, name and sign-in identifier, and the amount, the session reference, the receipt number and the time the host asked for delivery to start, for each payment (see privacy).
Where: Stripe Payments Europe, Limited in Ireland. Its data processing agreement covers transfers to Stripe in the United States. For fraud prevention and financial regulation, Stripe is responsible itself, under its own privacy policy.
Data processing agreement · Privacy policy · Stripe's own subprocessors
And sign-in and e-mail
A host who signs in does so on Google's or Microsoft's own sign-in page, under their own privacy policies, and they learn that you signed in to klapp. They are not processing anything for us there, so they are not listed above; what we receive from them is on privacy. Players never sign in.
E-mail does not touch the game. A message to hello@playklapp.com is forwarded by our domain registrar, Porkbun, to a Google Gmail inbox, so both see what you write to us. Our shop on Etsy is not listed above either: Etsy is responsible itself for what it holds about its buyers, and what we see of an order is on privacy.
When a company is added to this page, the date at the top changes and the new one is named here before it receives anything.