← Back to Stratara
GOSSIP

Sub-processors

Last updated: 1 November 2026

This page lists the service providers that process personal data for Stratara Ltd. to run GOSSIP. It matches the providers table in section 7.1 of the GOSSIP Privacy Policy, which explains what each one receives and why.

1. Running the game

Amazon Web Services

What it does for GOSSIP: Hosts the game server, its secrets and its logs.

Information it receives: App requests and the information needed to process them; server logs.

Location: United States (us-east-1)

More information: https://aws.amazon.com/privacy/

Supabase

What it does for GOSSIP: Accounts and the database.

Information it receives: Your email address, account identifier, usage and purchase records, push token, reported messages, conversation text, director notes, detailed AI activity, temporary generated pictures and related metadata.

Location: United States

More information: https://supabase.com/privacy

Apple

What it does for GOSSIP: The App Store, purchases and push notifications.

Information it receives: Payment information handled by Apple, purchase receipts, and push notification payloads.

More information: https://www.apple.com/legal/privacy/

Expo

What it does for GOSSIP: Delivers push notifications.

Information it receives: Push notification payloads and push tokens.

More information: https://expo.dev/privacy

Resend

What it does for GOSSIP: Sends sign-in emails.

Information it receives: Your email address.

More information: https://resend.com/legal/privacy-policy

2. AI

xAI

What it does for GOSSIP: Grok writes the story and runs the safety checks.

Information it receives: What the story needs for each turn: the characters, the story so far and your messages.

More information: https://x.ai/legal/privacy-policy

Replicate

What it does for GOSSIP: Runs image generation (OpenAI's GPT Image 2 and fallbacks) and backs up voice-note transcription.

Information it receives: Image descriptions; voice-note audio when the backup is used, without your email address or account identifier.

More information: https://replicate.com/privacy

OpenAI (through Replicate)

What it does for GOSSIP: Generates images (GPT Image 2).

Information it receives: Image descriptions and your account identifier.

More information: https://openai.com/policies/privacy-policy

Groq

What it does for GOSSIP: Transcribes voice notes.

Information it receives: Voice-note audio, without your email address or account identifier.

More information: https://groq.com/privacy-policy/

Anthropic

What it does for GOSSIP: AI assistants our team uses for debugging and product research.

Information it receives: Games and records the team asks them to read.

More information: https://www.anthropic.com/legal/privacy

3. Advertising measurement, only if you allow it

Meta Platforms

What it does for GOSSIP: Measures our advertising on Instagram and Facebook, only if you choose Allow on Apple's tracking prompt (Privacy Policy, section 3.6).

Information it receives: The in-app events listed in section 3.6 of the Privacy Policy, your device's advertising identifier, basic device information and your internet address, with Limited Data Use for US players. Never your messages, conversations, voice notes, images, name or email address. Meta also uses this information under its own terms and data policy. If Meta's kit itself crashes, Meta also receives a crash report.

More information: https://www.facebook.com/privacy/policy/

4. Changes to this list

When we add, remove or replace a provider, we update this page, the Privacy Policy's providers table and the date above.

Questions about any provider listed here: [email protected].

Related documents:
Gossip Privacy Policy | Gossip Terms of Service