Draft — requires legal review

This document describes Karot's intended data practices and has not been reviewed by a lawyer. It must be reviewed and, where required, adapted to the jurisdictions Karot is offered in before Karot is distributed publicly or submitted for Google OAuth verification.

Service providers

Last updated: 2026-10-07

The Privacy Policy and Terms refer to this list. It is the current list of companies that process data for Karot, with what each receives and why.

ProviderWhat it receivesWhyProcessing location and transfer mechanism
GoogleYour contacts, including the Karot section of the notes field, in your own Google accountGoogle Contacts storage and account sign-inUnited States and other Google locations. [ATTORNEY: transfer basis]
CloudflareRequests to this website and the API, with standard request logs (IP address, user agent, timestamps)Hosting and request logsGlobal network, including the United States. [ATTORNEY: transfer basis]
StripePayment details and billing email, when something is purchased. Card details go to Stripe, not to KarotPayment processingUnited States and other Stripe locations. [ATTORNEY: transfer basis]
ButtondownYour email address, if you sign up for launch updatesEmail newsletterUnited States. [ATTORNEY: transfer basis]
Ticketmaster, TMDB, TheSportsDBLookup queries with only these 11 non-personal keys: city, region, country, team, league, interest, cuisine, date_from, date_to, lat, lonEvents, films and sports ideasNot applicable for personal data, as only non-personal values are sent. [ATTORNEY: confirm no transfer analysis is needed]
Card printing and mailing partnerRecipient name, postal address and the typed message, when cards are offeredPrinting and mailing cards. Not yet selected; it will be named here before cards go on saleNot yet selected. [ATTORNEY: transfer basis]