There's thing thing called GDPR which requires me to tell you what atrocities I do with your personal data. And, honestly, I don't do any shenanigans with it at all.
Third party services
Comments are stored on my server as this site runs on a custom Ghost version.
All submitted data through the contact form is send to a tool I've written myself (and which is hosted on my server).