How do we know?

Two questions, one careful starting point

“After you click accept, where does your data go?” and “How did that company even end up with my data?” are invitations to investigate. Clicking accept does not necessarily cause or authorize every practice shown here. The applicable service, settings, contract, purpose and law can differ.

We examine published documents and keep each connection attached to its source. We do not observe your traffic, access your accounts or claim to know which supplier handled a particular person’s information.

What a connection means

A connection is a documented claim between two entities. Its direction follows the disclosure. A company’s statement about a supplier is different from that supplier’s statement about its own providers.

Subprocessor

A provider engaged to process personal data on another processor’s behalf. The applicable customer agreement, service and conditions still matter.

Hosting or network delivery

Infrastructure or delivery described by a source. This alone does not establish access to every category of content.

Independent collection, licensing or advertising

Different activities from processing on behalf. We retain their separate roles, purposes and jurisdictional limits.

Corporate ownership or investment

A corporate relationship is not a data transfer. A shared owner, model brand or commercial partnership is insufficient evidence for a processing connection.

Two supported edges are not proof of an end-to-end personal data route. Products, regions, data categories and enabling conditions may not match. A cycle in the map is not proof that your information travelled in a circle.

From an official source to a published connection

1. Find the applicable document. We prioritize official privacy notices, product terms, data processing agreements, subprocessor lists and equivalent primary disclosures.
2. Record a bounded claim. The extracted record keeps the source URL, exact recipient label, direction, role, product scope, conditions, relevant dates, and locations or data categories only when established.
3. Check it independently. A different researcher opens the source and reviews the claim and its conditions. Extraction is not publication approval. Research and review may be performed by agents; we do not label that work human-reviewed.
4. Publish the reviewed record. The public interface reads a reproducible snapshot. Unverified proposals stay out of published relationships, and historical snapshots are retained.

The source link is available beside each connection. Review dates refer to particular claims or account scopes, not an endorsement of an entire company.

The service and account come first

A brand can include many legal entities and products. A business agreement does not automatically apply to a personal account. A plan may have feature-specific conditions, such as optional support or a connected AI model.

Our service guides use separately checked account and plan bindings. When a context has no supported named connection, it stays empty; it does not inherit a company’s broader supplier list. Opening another company in the explorer introduces that company’s own scope.

Exact disclosed entity labels remain visible. A separately reviewed link to broader company research is navigation, not a merger of legal entities or a new data-processing relationship.

Different kinds of “we don’t know”

No named recipient in the reviewed material

A source may describe only categories. That does not establish a complete supplier list or an absence of sharing.

Research incomplete

We may have reviewed selected documents or selected rows. Counts describe this research, not all of a company’s practices.

Source blocked or unreadable

A failed fetch, login wall or unparsed table is recorded as a coverage gap. It does not establish a removed relationship or an empty list.

Outside this view

A filter, account context or drawing limit may hide relationships. The explorer reports eligible totals and offers a list view.

No supported connection found

Our reviewed records do not establish the requested connection. They cannot prove that no relationship exists.

Dates that mean different things

Retrieved is when a source was opened. Document updated and effective date come from the document when available. Reviewed is when a specific claim was independently checked. A successful fetch does not renew a substantive review.

A 90-day review cadence flags records for another check; it is not a guarantee that a source stays current for 90 days. Historical and undated material remains distinct from current disclosures. Locations are labelled by what the source actually says: a registered address does not establish where data is processed.

Following the map

Choose a service or company, read a connection, and open another branch. Expanding a node adds its relationships; changing focus changes the question you are exploring. Your trail records your navigation, including revisits. It is not a reconstructed route taken by your data.

The map and accessible list show the same underlying records. A crowded map may draw a limited set at a time; counts and controls expose the rest. Search guides present selected connections with a route to the complete eligible list in the explorer.

Why some companies have guides and others do not

We publish a small editorial selection instead of creating a search page for every database record. Company guides need substantive research, multiple supported current connections, multiple readable source documents and recent independent reviews before entering the sitemap. Service guides need separately reviewed account scopes, useful conditions and limitations, and multiple readable source documents.

A useful guide may remain readable while excluded from search indexing if its evidence is incomplete or overdue. The company and service registers still provide access to the wider research.

Using this site

The explorer is read-only. Its search and filters run in your browser against the published research. The product has no accounts, submissions, analytics or tracking scripts. Opening a source takes you to that publisher’s website and its own policies.

We cannot determine or change a company’s handling of your account. Use the linked official notice and the service’s own settings for questions about your particular circumstances.

Start with something you use

Browse service and account guides, read a company guide, or explore the connections.