The service providers behind 3sixs.com — what each one does, what data it sees, and where it sits. A small, honest list.
Last updated: May 18, 2026
| Provider | Purpose | Data categories | Processing region | Notes |
|---|---|---|---|---|
| Vercel | Hosting, edge delivery, deployment | Request metadata (IP, timestamp, path, user agent), error logs | United States and Vercel's global edge | Standard hosting log retention; provider terms apply |
| Cloudflare Turnstile | Bot-defense / CAPTCHA on the contact form | Browser security signals, challenge tokens | Cloudflare global network | Runs only on the contact page, inside its own frame |
| Plausible | Cookieless website analytics | Aggregate page views, country-level location (transient IP), referrer, device class | European Union (Plausible-hosted) | No cookies; no individual visitor profiles |
| Sentry | Error monitoring and performance diagnostics | Sanitized error events: URL, browser/device, stack trace, error message | Varies / global per Sentry SaaS | Session replay disabled; sendDefaultPii not set; sanitizer scrubs known PII fields before send |
| Resend | Transactional email delivery for inbound briefs and replies | Sender/recipient addresses, subject, message body, delivery metadata | United States | Used to forward briefs to our team inbox and to send our replies |
| Upstash | Rate-limit storage for the contact pipeline | Short-lived counters keyed on IP-plus-email; no brief content | Upstash region(s) configured for this deployment | Counters expire within hours |
| Slack | Optional internal team notifications when an inbound brief is received | Heads-up payload only — deliberately omits name, email, IP, and brief content | United States | Optional channel; only active when configured in the deployment environment |
This inventory covers the providers that support website operations. It is not a statement about signed data-processing addenda with each vendor — where vendor DPAs, standard contractual clauses, or Data Privacy Framework participation are published by the provider, we rely on those terms. Specific transfer-mechanism questions can go to hello@3sixs.com.
We will update this page when providers are added, removed, or change in a way that affects what data they see. For broader context, see the privacy notice and the security page.