Legal
Data Processing Agreement Resources
This page lists the public data processing and transfer resources for the third-party vendors WebHostWatch uses for infrastructure and, where enabled, analytics. Self-hosted components on our own server are called out separately because they do not rely on an external processor agreement.
How to Use This Page
If a compliance form asks for public links to processor terms, SCC information, or vendor data processing agreements, use the official links below.
This page is a public vendor-resource page. It is not a signed customer-specific DPA between WebHostWatch and a third party.
Cloudflare
Used for CDN, DNS, proxying, TLS edge handling, and related network services.
| Official DPA | Cloudflare Customer Data Processing Addendum |
|---|---|
| SCC Reference | Cloudflare Standard Contractual Clauses for Customers |
| Notes | Cloudflare publishes both the main DPA and a dedicated SCC customer document. |
Relevant when Google Analytics or Google tag services are enabled on the site.
| Processor Terms | Google Ads Data Processing Terms |
|---|---|
| Accepted Status | Google Ads Data Processing Terms accepted as of April 20, 2026. |
| Analytics Terms | Google Measurement Controller-Controller Data Protection Terms |
| Transfer / SCC Info | Advertising and analytics products: information about international data transfers |
| Notes | Google separates processor terms from measurement controller terms. The transfer page explains when Google relies on SCCs or other lawful transfer mechanisms. Accepting the processor terms is useful, but it does not replace the measurement controller terms that apply to standard Google Analytics use. |
netcup
Used for origin VPS infrastructure and related hosting services.
| DPA Information | netcup Data Processing Agreement documentation |
|---|---|
| Signed DPA Status | A customer-specific signed netcup DPA is on file as of April 20, 2026. The raw PDF is not published here because it contains customer-identifying details. |
| Notes | netcup provides customer-specific DPAs through the Customer Control Panel. Their public documentation explains the process and where the signed DPA is issued. |
Self-Hosted Components
- Website HTML, static assets, and application logic are served from infrastructure we control.
- Contact form submissions are stored locally on our server and routed to our self-hosted mailbox.
- Mail handling for [email protected] is self-hosted and does not rely on Google Workspace or another hosted mail processor.
Questions
For privacy or processing questions, contact [email protected].