Privacy Policy

1. Scope

This policy applies to the hosted NestMarks websites, applications, APIs, and browser capture tools operated by Amanix Labs.

2. Information we process

Account information

We process your email address, password hash, verification status, session or device tokens, and account settings. We never need your plaintext password.

Your bookmark library

We store URLs, titles, descriptions, notes, collections, tags, favorites, revisit dates, import data, and other information you add. When enrichment is enabled, NestMarks may retrieve a saved public URL to collect page metadata, favicons, or cover images.

Files and images

Preview images that NestMarks retrieves from the pages you save may be stored locally or with a configured storage provider such as Cloudinary. Standard bookmark exports are generated when you request them.

Optional AI and integrations

If you enable AI-assisted organization, selected bookmark metadata may be sent to the provider identified in your settings, such as a local model, OpenAI, or Anthropic. Proposed changes require review before application. Connected services receive information only for the sync or action you authorize.

Technical information

Servers may process IP address, browser or device details, requested routes, timestamps, and error or security events. Email delivery information is processed when verification or password-reset email is enabled.

3. Why we use information

• Create and secure accounts.
• Save, enrich, organize, search, import, export, and synchronize bookmarks.
• Send requested verification, password-reset, and important service messages.
• Prevent abuse, diagnose failures, and improve reliability.
• Provide optional AI or connected features after you enable them.
• Meet legal obligations and protect users and the service.

4. Providers and sharing

Information is processed by the providers on the subprocessors page: hosting (Oracle Cloud), network and backups (Cloudflare), email (Resend), Google if you sign in with Google, Paddle if you buy Pro, OpenAI or Anthropic only when you run AI organize, and PostHog for a few product events (such as “library imported”) tied to a pseudonymous account id, never to the pages you save. A destination you connect, such as GoalZen, receives only what you send to it. We may disclose information when required by law or during a business reorganization with appropriate safeguards.

We do not sell personal information. We do not use private bookmark URLs, notes, or browsing history for advertising, and we do not use your library to train AI models.

5. Security and retention

Hosted accounts are separated by ownership checks, and passwords are stored as hashes. Extension and device keys are stored as hashes and can be revoked. We retain account and bookmark data while the account remains active.

When you delete your account it is disabled at once and permanently erased 30 days later; signing in during those 30 days offers Restore account. Nightly encrypted backups expire automatically on a rolling schedule, so deleted data leaves backups as they age out. Limited security logs or records required by law may remain for a reasonable period. No online service can guarantee absolute security.

6. Cookies and browser storage

NestMarks sets one cookie, and only once you sign in: a session cookie named token that keeps you signed in. It is HttpOnly (scripts cannot read it), Secure (sent over HTTPS only), SameSite=Lax, and it expires 7 days after sign-in or at once when you sign out. It is strictly necessary to run the service, so it needs no consent. The web app also keeps a copy of the sign-in token, your accent colour and the page to return to after sign-in in your browser’s local or session storage; the website keeps your light or dark appearance choice the same way. None of this leaves your browser.

Videos in our guides are click-to-load: until you press play, the page shows a button drawn by this site and makes no request to YouTube. When you press play, the video loads from YouTube in its privacy-enhanced mode (youtube-nocookie.com), and from then on Google’s privacy policy applies to that video. No YouTube cookies are set before you press play.

There are no analytics, advertising or third-party cookies, and no tracking script loads on the website or in the app. The product events listed under providers are recorded by the NestMarks server, not in your browser. If we ever add a browser tracker, it will be switched on only after a consent banner is in place, with declining as easy as accepting, and this page will be updated first.

7. Your controls

• Edit and delete individual bookmarks, collections, tags, and notes.
• Import or export a portable browser-compatible bookmark file.
• Disable optional AI and disconnect integrations.
• Delete the hosted account and its associated library from Settings.
• Request access, correction, export, or deletion by contacting support.

See account deletion or email [email protected].

8. Children

NestMarks is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Local minimum-age rules may be higher.

9. International processing

Hosted-service providers may process data in countries other than your own. Where required, we rely on appropriate contractual or legal safeguards.

10. Changes and contact

We may revise this policy as NestMarks and its configurable providers change. Material changes will be reflected by the updated date and, when appropriate, an in-product notice.

Privacy questions: [email protected]
Operator: Amanix Labs