Effective: July 27, 2026
A subprocessor is a service provider that processes personal information for Memr.is, Inc. The list below identifies providers used by the website or an enabled product feature. A provider marked conditional receives information only when the related feature is enabled.
This is not a list of every library or development tool. It focuses on vendors that can process visitor or product information in the service path.
Current and conditional service providers
| Provider | Status and service | Information and purpose | Location |
|---|---|---|---|
| Cloudflare, Inc. | Current — Pages hosting and edge execution; Turnstile abuse prevention | Website requests, IP and browser/request metadata, Turnstile token and signals, and form content in transit; used to deliver and protect the marketing site | Cloudflare's global network and contracted processing locations |
| Microsoft Corporation | Conditional by environment — Azure Communication Services Email | Validated website-form content, sender and recipient addresses, reply-to address, and delivery metadata; used to deliver an inquiry to the Memr.is team when credentials are configured | The Azure resource region configured by Memr.is and Microsoft's supporting locations |
| Google LLC | Current — Google Analytics 4 through the Google tag (gtag.js) on the public marketing site, activated automatically outside Europe and only after the visitor allows analytics in Europe | Page URL and title, referrer, interaction events, approximate location derived from IP, browser and device details, first-party Analytics identifiers, and regional activation or consent state; used to measure public-site traffic and usefulness. Memr.is does not intentionally send form answers, account data, or user IDs to Google Analytics | Google's global infrastructure and contracted processing locations |
| Google LLC | Current — Google Tag Manager on the public marketing site | Page and event context, consent state, browser and device details, and tag-delivery metadata; used to deliver and manage the analytics and advertising-measurement tags described in this register. Tag Manager does not determine independently which tags Memr.is publishes | Google's global infrastructure and contracted processing locations |
| Microsoft Corporation | Current — Microsoft Advertising Universal Event Tracking (Bing Ads) and Microsoft Clarity on the public marketing site | Page URLs, referrer and campaign parameters, clicks and other interactions, conversion events, browser and device details, IP-derived approximate location, advertising identifiers, and Clarity session-replay and heatmap data; used for campaign attribution, advertising measurement, site diagnostics, and usability analysis. Memr.is configures these tools not to intentionally capture form-field values | Microsoft's global infrastructure and contracted processing locations |
| Meta Platforms, Inc. | Current — Meta Pixel on the public marketing site | Page visits, referrer and campaign context, conversion and interaction events, browser and device details, IP address, and Meta cookie or advertising identifiers; used for campaign attribution, conversion measurement, and audience measurement | Meta's global infrastructure and contracted processing locations |
| X Corp. | Current — X Pixel on the public marketing site | Page visits, campaign context, conversion events, browser and device details, IP address, and X cookie or advertising identifiers; used for campaign attribution and conversion measurement | X's global infrastructure and contracted processing locations |
| LinkedIn Corporation | Current — LinkedIn Insight Tag on the public marketing site | Page visits, referrer and campaign context, conversion events, browser and device details, IP address, and LinkedIn cookie or advertising identifiers; used for campaign attribution, conversion measurement, and aggregate professional-audience insights | LinkedIn's global infrastructure and contracted processing locations |
| OpenAI, L.L.C. | Current — ChatGPT Ads measurement on the public marketing site | Page visits, campaign context, conversion events, browser and device details, IP-derived location, and available advertising identifiers; used for campaign attribution and advertising measurement | OpenAI's and its contracted providers' processing locations |
| OpenAI, L.L.C. | Current — ChatGPT for internal content generation and related business assistance | Prompts, drafts, reference material, generated output, and account and technical metadata; used to draft, edit, summarize, research, and otherwise assist with marketing, support, operational, and product content. Personnel are instructed not to submit passwords, authentication secrets, raw identity documents, or unnecessary child or customer personal information | OpenAI's and its contracted providers' processing locations |
| Anthropic, PBC | Current — Claude for internal content generation and related business assistance | Prompts, drafts, reference material, generated output, and account and technical metadata; used to draft, edit, summarize, research, and otherwise assist with marketing, support, operational, and product content. Personnel are instructed not to submit passwords, authentication secrets, raw identity documents, or unnecessary child or customer personal information | Anthropic's and its contracted providers' processing locations |
| Google LLC | Conditional — Firebase Authentication | Firebase identifier, selected identity-provider identifier, authentication token, email/name supplied by the provider, verification status, and authentication metadata; used only when social sign-in is enabled | Google's contracted processing locations |
User-selected identity providers
Memr.is uses Firebase Authentication to broker enabled social sign-in choices. The identity provider authenticates the user and sends an identity result through Firebase only after the user selects that provider. Depending on the relationship and configuration, an identity provider may act independently under its own privacy terms rather than solely as a Memr.is subprocessor.
| Provider and service | Status | Information and purpose |
|---|---|---|
| Google LLC — Sign in with Google | Conditional — available when enabled and selected | Google account identifier, authentication result, and available name, email, and verification status; used to authenticate or connect a Memr.is account |
| Meta Platforms, Inc. — Facebook Login | Conditional — available when enabled and selected | Facebook account identifier, authentication result, and available name, email, and verification status; used to authenticate or connect a Memr.is account |
| X Corp. — Sign in with X | Conditional — available when enabled and selected | X account identifier, authentication result, and available name and email; used to authenticate or connect a Memr.is account. X may not provide an email address, in which case Memr.is asks the user for one |
| Apple Inc. — Sign in with Apple | Planned — coming soon; not yet active | No Memr.is processing through this integration until it is enabled. When launched, Apple will authenticate a user and may provide a name, account identifier, and either an email address or an Apple private relay address |
| Microsoft Corporation — Microsoft identity sign-in | Planned — coming soon; not yet active | No Memr.is processing through this integration until it is enabled. When launched, Microsoft will authenticate a user and provide an identity result and available basic profile information |
User-selected device services
A browser or operating-system feature may also process information when a user deliberately turns on a device capability.
| Service | When it is used | What to expect |
|---|---|---|
| Browser or operating-system speech recognition | Only when recite-aloud is available, enabled, and the user activates the microphone | The browser or device speech service may process microphone audio; Memr.is receives the resulting transcript and retains derived grading data rather than intentionally persisting raw audio |
Services we do not currently use for product data
The public marketing site uses the analytics and advertising-measurement providers described above. OpenAI and Anthropic support internal content generation and related business work, but are not approved as in-product generative-AI features or as destinations for unnecessary child or customer personal information. The pre-release Memr.is product does not currently use a payment processor, data broker, in-product advertising SDK, third-party product-analytics pipeline, in-product generative-AI provider, or push-notification provider for product data. Development services such as source-code hosting and continuous integration are not intended to receive customer personal information and are not listed as customer-data subprocessors here.
Changes to this register
We will update this page before a new material provider begins processing personal information for Memr.is. Where a contract, law, or guardian-consent obligation requires additional notice or consent, we will follow that process. We do not promise advance email notice unless a user has subscribed to an applicable notice process.
Questions
Questions about a provider or this register can be sent to Memr.is, Inc. at hello@memr.is.