Subprocessors
Last updated: 2026-11-08
Providers that process data on LanFaro’s behalf, what they receive, where and when. Part of the data processing policy and the data processing agreement. We will give 30 days’ notice before adding a subprocessor that receives network data.
| Provider | Purpose | Data received | Country | When |
|---|---|---|---|---|
| Supabase | Database, authentication and storage (guide videos) | Account, two-step factor, synced network data, linked computers, security log, alert settings | Supabase infrastructure on AWS (region available on request) | Whenever you use the account |
| Render | Hosting of the website and API | Requests to the website and API (IP, browser, request content) | United States | Whenever you use the website, a linked app or the agent |
| Resend | Email delivery | Recipient email and the alert or report content | United States | When sending alerts, digests, reports or account emails |
| Sentry | Website error reports | Technical error trace, without IP, email, cookies, body or network data | United States | When something fails on the website |
| Anthropic | AI assistant | Your question and anonymous technical network data, without IP, full MAC or names; not used to train models | United States | Only when you ask the assistant |
| Lemon Squeezy | Payments (Merchant of Record) | Name, email, country, payment data and amount | United States | Only when paying or managing the subscription |
| Meta (WhatsApp Business) | WhatsApp alerts | Your number and the alert text, without IP or MAC | United States | Only if you turn on WhatsApp alerts |
| Browser push services (Google, Mozilla, Apple) | Push notifications | Alert text, end-to-end encrypted to your browser | United States | Only if you turn on push notifications |
| Cloudflare | Speed test, public IP and country (1.1.1.1/cdn-cgi/trace) | Your connection’s public IP | United States | When measuring speed or checking the public IP |
| InternetDB (Shodan) | “What the Internet sees” for your public IP | Your public IP | United States | Only when you press the button |
| macvendors.com | Vendor of a device missing from the local catalog | Only the first 3 MAC bytes (the vendor prefix) | United States | If the option is on and the vendor is unknown |
| GitHub | Downloads and update checks | Request IP | United States | When downloading or checking for updates |
| Public IP registry (RDAP: rdap.org, redirecting to LACNIC, ARIN, RIPE…) | Name of the ISP of your public IP | Your public IP | United States / registry region (LACNIC: Uruguay) | When uploading to the cloud or opening Network information |
Destinations you choose
Telegram, Discord, Slack, Microsoft Teams and the webhooks you set up in Alerts receive the alert text because you point to them; they are your services, not LanFaro subprocessors. The DNS check queries 10 well-known public sites and the DNS tools query the public resolvers you choose, without sending network data.
What does not leave
Without “Cloud” enabled, your network’s device list never leaves your computer. In the app, Settings → What leaves this computer shows live which destinations are active and when they were used.