[CitrusFruits]

I don't plan on sharing personal information with any sort of entity, certainly not for profit. But, the personal information is stored on machines and manipulated by other companies, namely Supabase and SendGrid since its necessary for the site to function.

[hn_user2]

If this is the case, I would recommend a stronger word than "affiliate". My data is always being sold to marketing affiliates.

[javajosh]

It's admirable that you're aware of the risk you're placing on your users, and willing to assuage them. If you're audience is HN, you might want to simply list the 3rd party runtime components you're using (and to go one better, review their privacy notices, recursively -- I can imagine a malefactor doing a backroom deal with a component provider to get kickbacks on data being shared down the line.) I would also include any front end components in this notice, like Cloudflare or GA.

Last but not least, it would be nice to know who's behind this, because none of these assurances mean anything if you're really a malefactor. I would recommend putting a real name or two in your "About" page.

[spullara]

For it to be available in EU at all I think they will have to list all of them anyway.

[quickthrower2]

Just say that then