Payment
GDPR Lemon Squeezy
In an indie stack, Lemon Squeezy is used for Sale of digital products. Entity cited: Sold through Link, LLC, formerly Lemon Squeezy LLC. The sections repeat what the vendor publishes, without filling a gap. Last update of the facts: October 4, 2026. Verified on October 4, 2026.
Translation of the French sheet. The facts do not change. The date is the date the official pages were read.
DPA Lemon Squeezy
Yes. Public DPA.
Stated role
The privacy policy states that Lemon Squeezy is controller and/or processor of the personal information provided to it. The public DPA is concluded with Sold through Link, LLC.
Personal data
The policy cites name, email, device type, operating system, device identifiers, and user-generated content.
Sub-processors of Lemon Squeezy
Public URL of a sub-processor list: not disclosed.
Public URL of a list: not disclosed on this sheet.
Transfers outside the EU
Hosting / location
The policy indicates storage and/or processing in the United States, or in facilities of Lemon Squeezy, its partners, affiliates, and providers.
EU–United States Data Privacy Framework
Official search for “Lemon Squeezy” and “Sold through Link”: no participant. Not registered.
Cookies
The policy indicates cookies to understand use of the site and to serve content according to preferences.
Typical use, written by StackLégal and not by the vendor: Sale of digital products.
History
Last update: October 4, 2026.
First publication. The facts come from the official pages cited in the sources. Anything not stated there remains "not disclosed".
Clause to paste
Place it in the sub-processor section of your privacy policy. Review it: a “not disclosed” field must be completed before publication.
Sub-processor clause
Sources
Verified on October 4, 2026.
Frequently asked questions
Is Lemon Squeezy a processor within the meaning of the GDPR?
The privacy policy states that Lemon Squeezy is controller and/or processor of the personal information provided to it. The public DPA is concluded with Sold through Link, LLC.
What DPA does Lemon Squeezy publish?
Yes. Public DPA. https://www.lemonsqueezy.com/dpa
Which further sub-processors does Lemon Squeezy publish?
Public URL of a sub-processor list: not disclosed.
Where does Lemon Squeezy state that it processes data, including outside the EU?
The policy indicates storage and/or processing in the United States, or in facilities of Lemon Squeezy, its partners, affiliates, and providers.
Is Lemon Squeezy registered under the EU–United States Data Privacy Framework?
Official search for “Lemon Squeezy” and “Sold through Link”: no participant. Not registered.
Which personal data does Lemon Squeezy mention?
The policy cites name, email, device type, operating system, device identifiers, and user-generated content.
Often in the same stack
These sheets come up in searches for a Next.js SaaS. Next.js itself is not a processor: GDPR Next.js.
Related tools
Full pack, from 39 € incl. VAT
The clause above covers only one tool. StackLégal generates the legal notices, terms of use, terms of sale, privacy policy, Article 28 DPA, and the public list, naming only the boxes that are checked. One-time payment via Gumroad. This is not legal advice.