Sub-processors

The providers that process personal data for LinearBits on behalf of Linear Bits LLC, and what each one handles.

Stripe, Inc. (United States) — payment processing, subscriptions, invoices, and the customer portal. Card details go directly to Stripe and never reach our servers.

Railway Corp. (United States) — application hosting, the primary database, and stored files.

Akamai Technologies / Linode (United States) — the isolated sandbox that runs code you submit. It receives the code and input of a run, not your account.

Cloudflare, Inc. (United States) — DNS, TLS termination, and edge routing for linearbits.com, and Cloudflare Web Analytics, a page-load measurement that sets no cookies or local storage.

Resend, Inc. (United States) — transactional email delivery: activation, password reset, billing notices, and reminders you opt in to.

Functional Software, Inc. (Sentry) (United States) — error reporting. Request bodies, headers, cookies, query strings, and user identifiers are stripped before an event is sent.

PostHog, Inc. (United States) — product analytics and limited session replay, loaded only after you accept analytics.

Google LLC (United States) — Tag Manager, Analytics, and Google Ads conversion measurement under Consent Mode, as described in our Cookie Policy; Google sign-in when you choose it.

GitHub, Inc. (United States) — GitHub sign-in when you choose it.

Twilio Inc. (United States) — sends sign-in codes by text message or WhatsApp when you choose phone sign-in.

OpenAI, L.L.C. (United States) — processes the problem context and the work you submit to an AI feature, when you use one. Nothing is sent unless you use the feature.

Your own AI provider

If you connect your own key for OpenAI, Anthropic, Google Gemini, xAI, Mistral, Groq, or OpenRouter, the AI requests you make go to that provider under your own account and its terms. That provider acts for you rather than for us, so it is not listed above.

Embedded content

Lessons and other pages can embed media from YouTube, Vimeo, Twitch, CodePen, Imgur, Gfycat, Coub, Vine, Instagram, X (Twitter), Pinterest, Facebook, and Aparat. An embed loads from its provider only when you open a page that contains it; that provider then receives your IP address and browser details and may set its own cookies under its own privacy policy. These providers are independent of us and are not our sub-processors.

Changes

We update this page before a new sub-processor receives personal data. Questions about any provider: hello@linearbits.com.