Where are the servers, and what about data protection?
On dedicated servers in the EU, with Cloudflare in front for CDN and firewall. That keeps personal data within the EU/EEA, which simplifies GDPR compliance considerably compared with hosting outside it.
