Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Patronite

VERIFIED

Crowd8 sp. z o.o., ul. Żwirki i Wigury 16, 02-092 Warszawa, Poland (KRS 0000548195, NIP 5242777491)

Membership platforms · Poland
Founded 2015 · patronite.pl ↗

Poland's creator membership platform (Crowd8 sp. z o.o.): 6.5% commission with Polish payment rails, Tpay and ING's Imoje, on AWS Frankfurt infrastructure.

In short

Patronite, in the Membership platforms category, offers EU hosting with Germany as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

Patronite is Poland's membership platform for creators, operated by Crowd8 sp. z o.o. in Warsaw, and it is the second entry in this category whose default payment rails are EU-incorporated: the fee annex to its terms names Tpay (Polish, bank transfer and BLIK, 0.8%) and Imoje (the payment service of ING Bank Śląski, recurring card payments, 1%), with PayPal as an optional third route. The platform commission is 6.5% on top. Its privacy documentation is unusually candid in one specific way: the recipients table marks the hosting provider, the office-software and mail provider, the analytics and push provider, and the marketing tools as transferred outside the EU (USA), under standard contractual clauses. That candour is worth noting, and it is also the finding: patronite.pl resolves into AWS eu-central-1 in Frankfurt, so the data is in Germany but the operator is American, and Google Analytics, Google AdSense, Microsoft Clarity, OneSignal and the Meta pixel are all present: Material. No public DPA and no named sub-processors list, which caps this at 3/5.

CLOUD ACT
OWNERSHIP
SUB-PROCS
10 · 8 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Patronite

Patronite is the Polish membership platform for creators, operated by Crowd8 sp. z o.o. from Żwirki i Wigury in Warsaw and registered under KRS 0000548195. Patrons support authors with recurring monthly pledges at set tiers or with one-off contributions, and authors publish members-only material against those tiers. It is the dominant platform of its kind in Poland, with a heavy weight of journalism, podcasting and commentary among its authors, and the interface is Polish only.

The payment arrangement is the part worth reading. Patronite's own commission is 6.5% of each pledge, and the fee annex to the terms names exactly three payment operators with their rates: Tpay for bank transfers, BLIK and payment slips at 0.8%, Imoje, the payment service of ING Bank Śląski, for recurring card payments at 1%, and PayPal for recurring payments at 2.9% plus 1.35 zł. Two of those three are Polish financial institutions, which means a Polish patron paying a Polish creator with BLIK never touches a US payment company at all. Alongside Patreon-style pledges, Crowd8 also operates fundraisers and one-off contributions on the same rails.

What Patronite discloses about the rest of the stack is more candid than most and, read carefully, is the audit finding. The privacy documentation includes a recipients table which marks the hosting provider, the office and mail software provider, the analytics and push provider, and the marketing tools as transferring data outside the EU to the USA, relying on standard contractual clauses under Article 46(2)(c) GDPR. Live infrastructure confirms the hosting half of that: patronite.pl resolves into AWS eu-central-1 in Frankfurt, so records sit in Germany under an American operator. The cookie table adds Google Analytics, Google AdSense, Microsoft Clarity, OneSignal and the Meta pixel, and the mail configuration shows Google Workspace and Freshdesk: Material. No individual sub-processor is named anywhere and no DPA is published. Best fit: Polish creators whose audience pays in złoty, where the local rails are both cheaper and cleaner than the alternatives.

SUB-PROCESSORS

Sub-processor map · 10

  • Amazon Web Services (AWS eu-central-1) US
    United States

    Platform hosting in Frankfurt, Germany (the recipients table records the hosting provider as a US transfer)

  • Freshworks Inc. (Freshdesk) US
    United States

    Support ticketing and support email (from public SPF record)

  • Google Ireland Limited (Google Analytics and AdSense) US
    Ireland

    Audience analytics and conversion measurement for advertising (consent-gated)

  • Google Ireland Limited (Google Workspace) US
    Ireland

    Corporate and support email (from public MX and SPF records)

  • Meta Platforms Ireland Limited US
    Ireland

    Facebook pixel analytics and advertising (consent-gated)

  • Microsoft Corporation (Clarity) US
    United States

    Session analytics and user identification across pages (consent-gated)

  • OneSignal, Inc. US
    United States

    Push notifications in the mobile app (consent-gated)

  • PayPal (Europe) S.à r.l. et Cie, S.C.A. US
    Luxembourg

    Recurring payments via PayPal (2.9% + 1.35 PLN per transaction)

  • Imoje (ING Bank Śląski S.A.) EU
    Poland

    Recurring card payments (1% per transaction)

  • Tpay (Krajowy Integrator Płatności S.A.) EU
    Poland

    Bank transfer, BLIK and payment-slip contributions (0.8% per transaction)

8 of 10 sub-processors are US-incorporated. CLOUD Act exposure applies.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-08-10).
FEATURES

Capability matrix

Recurring memberships Yes
One-off tips Yes
Pay-per-post No
Members-only content hosting Yes
Digital shop No
Connect your own payment account No
VAT collected and remitted for you No
INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    patronite.pl/regulamin…
    Open ↗
ALTERNATIVES

Alternatives in this category

Herohero
Czechia · Founded 2021
US-LINKED

Czech creator membership platform (Herohero a.s., Prague): flat 10% all-in fee and strong local reach, but the terms also contract through a Delaware corporation and content sits on Google Storage.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
DIRECT
Ko-fi
United Kingdom
EU-HOSTED

UK creator platform (Ko-fi Labs Limited) for tips, memberships and digital shops: 0-5% service fee, but payouts run only through PayPal, Inc. or Stripe, Inc., with no EU payment option.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL
Liberapay
France · Founded 2015
EU-HOSTED

French non-profit association running an open-source recurring-donation platform: 0% platform cut, but hosted on AWS Ireland with Stripe and PayPal as the only payment routes.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL