Sub-processors
These are the companies that touch your data, what each one receives, and why. The first one is the one you should read: when you photograph a tracking label, that photograph is sent to Anthropic, PBC to be read by a machine.
1. The disclosure that actually matters
When you photograph a tracking label, that photograph is transmitted to Anthropic, PBC, a company in the United States, where a machine reads the text on it and returns the brand and model number it believes it sees.
A photograph you took in your home leaves our server and goes to a third party. Most companies would file that under “automated processing” and name nobody. We are putting it in row one of the table, in the body of our contract, and in bold at the top of this page, because it is the fact about ShelfStamp that a careful person would most want to know before they press the shutter.
What is true about that transmission:
- EXIF and GPS metadata are stripped on our server, before transmission. The coordinates of the room you were standing in do not leave our infrastructure, because they are removed from the file before anything is sent anywhere.
- No name, no email address, and no account is attached to it. There is no account. The image is sent on its own. Anthropic is not told who you are, because we do not know who you are.
- Anthropic does not train models on it. That is their commitment under their commercial terms, which we link to below and which you can read for yourself rather than taking our summary of it.
If you would rather this did not happen, do not use the camera. Type the brand and model number in by hand. The screening is identical, the result is identical, it costs you nothing, and no photograph is created, stored, hashed, or sent to anyone. That option exists precisely so that this one can be declined.
2. The full list
Everyone who touches your data. Each name links to that company’s own privacy policy, because our characterisation of what they do is not evidence and theirs is at least binding on them.
| Company | What it does | What we send it | Location |
|---|---|---|---|
| Anthropic, PBC | Reading the text on a photographed tracking label — the brand and model number — so it can be screened. | The label photograph itself, after EXIF and GPS metadata have been stripped from it on our server. No name, email, or account is attached to it. | United States |
| Vercel Inc. | Hosting the website and running the application. | Requests to the site, including IP address and user agent, as an inherent property of serving a web page. | United States |
| Supabase, Inc. | The database and the storage bucket that holds label photographs. | Screening records, certificates, label photographs, and any email address you choose to give us. | United States |
| Stripe, Inc. | Taking payment for a certificate. | Your payment details, which you enter on Stripe’s own form. We never see or hold your card number. | United States |
| Resend (Plus Five Five, Inc.) | Sending you the screening record you asked us to email you. | Your email address and the contents of that one message. | United States |
There is no row for an advertising network, an analytics vendor, a data broker, or a customer-data platform, because we do not use any. The absence is the point of publishing the list.
3. What a sub-processor may and may not do
Each company above receives only what the table says it receives, and only for the purpose the table states. None of them is permitted to use your data for its own purposes, to sell it, or to disclose it to anyone else except as their own published policy and the law require of them.
They are service providers, not partners. We do not receive money, data, or anything else from any of them in exchange for what we send.
4. What we cannot promise
We strip the metadata. We cannot inspect the picture.
A photograph may incidentally capture something in the frame that we did not intend and cannot detect. A label on a crib is in a nursery. A child may be in shot. A prescription bottle, a letter, a screen, a reflection in a window — any of it can end up in a photograph of a sticker, and no filter we could write would reliably find it and no promise we could make would undo it.
So we will not pretend the risk is zero. We will tell you the only thing that actually reduces it, and we will keep telling you, at the moment you open the camera: photograph the label, not the room. Get close. Fill the frame with the sticker. If something else is in the picture, retake it before you upload it.
5. Changes to this list
We will publish a change to this list before a new sub-processor begins receiving data, not after. A page that is updated the week after a vendor was added is a record of a decision you were not given the chance to react to.
The commitment is a floor and not a courtesy: if you would object to a new company receiving your label photographs, you are entitled to know before it does, and to stop using the service instead.
6. Contact
Questions about any company on this list, or about what we sent it, go to privacy@shelfstamp.com. Everything else goes to support@shelfstamp.com.