Last updated 7 October 2026
Service providers
These are the only providers we have confirmed process Benefits Commons data. They act on our behalf to run the service. We don't sell data or use it for targeted advertising. See also the privacy notice and cookies & storage.
Lovable (Lovable Labs Incorporated)
- Purpose:
- Builds and hosts the website; serves pages and runs server code. Provides built-in, aggregate page-visit analytics for the site.
- Data:
- Page requests (IP address, browser/device details, pages visited, approximate country from time zone), and everything the app processes on the provider's infrastructure.
- Location:
- United States and other countries where the provider operates (not confirmed per region for this project).
- Transfer safeguards:
- Under the provider's own terms and data processing terms. Contact the operator for details.
Lovable Cloud (runs on Supabase)
- Purpose:
- Database, sign-in (accounts, passwords, sessions, two-factor), private photo storage, and account and service emails.
- Data:
- Everything in your account and application, your content, profile photos, sign-in email, and authentication logs (IP address, time).
- Location:
- United States and other countries where the provider operates (not confirmed per region for this project).
- Transfer safeguards:
- Under the provider's own terms and data processing terms. Contact the operator for details.
Cloudflare
- Purpose:
- Security and bot protection in front of the website (sets the __cf_bm cookie). If we turn on the anti-spam check on sign-in and sign-up forms, Cloudflare Turnstile also runs there.
- Data:
- IP address, browser details and request metadata needed to detect automated abuse.
- Location:
- United States and other countries where the provider operates (not confirmed per region for this project).
- Transfer safeguards:
- Under the provider's own terms and data processing terms. Contact the operator for details.
Fonts are bundled with the site, so no font provider receives your data. We add a provider here before it starts processing member data.