Legal disclosure
Sub-processors
These are the outside service providers ClickStream may use to operate the platform. Optional enrichment services only apply when a site owner enables them and has the required consent and privacy notices in place.
Provider
Why it is used
Data involved
Cloudflarecloudflare.com
Hosting, edge compute, DNS, analytics storage, and security services.
Visitor events, account configuration, and operational logs.
Stripestripe.com
Billing, subscriptions, invoices, and payment processing.
Account and billing details. Stripe does not receive ClickStream event data.
DataShopper (DataMoon)app.datamoon.com, datashopper.com
Optional person-profile enrichment when a site owner enables enrichment.
Hashed email identifiers (MD5) and a ClickStream visitor match key; only for sites with optional enrichment enabled. A hashed email address is personal data and is not made anonymous by hashing.
LiveIntent (engaged by DataShopper/DataMoon)liadm.com, liveintent.com (including subdomains such as d-code, idx, rp)
Browser-side identity resolution supporting optional enrichment. Runs only on sites where enrichment is enabled and the required consent is present.
Page URL/referrer and LiveIntent’s own cookies. Derives the hashed email used as the enrichment match key. Disabling optional enrichment stops this processing entirely.
Updates
We update this page before onboarding any new sub-processor. For contract, DPA, or vendor-specific disclosure questions, contact legal@clickstream.com.
Privacy controls are documented at docs.clickstream.com/privacy.