NestMarks · Amanix Labs
Subprocessors
The third-party services that process personal data so NestMarks can run, and when each one is involved.
Last updated October 2, 2026
Current list
| Provider | Purpose | Data involved | When |
|---|---|---|---|
| Oracle Cloud Infrastructure | Hosts the NestMarks servers, database and saved preview images. | All account and library data. | Always |
| Cloudflare | DNS, TLS and network protection; R2 storage for nightly backups (encrypted at rest by Cloudflare). | Request metadata (IP address, URL path); backup copies of the database and preview images. | Always |
| Neon | Database for our internal admin panel: request and error logs we use to keep NestMarks running. | Your account id, the routes you requested and their status, and the text of searches you run in NestMarks (up to 200 characters). Never passwords, tokens, request bodies or IP addresses. Kept 7 to 30 days. | Always |
| Resend | Sends verification, password-reset and service emails. | Email address and the message content. | When an email is sent |
| “Continue with Google” sign-in. | Your Google account email and a sign-in identifier. | Only if you sign in with Google | |
| Paddle | Merchant of record for Pro: checkout, tax, invoices, refunds. | Email, billing country and payment details (entered with Paddle, never stored by NestMarks). | Only if you buy Pro |
| OpenAI or Anthropic | AI-assisted organization suggestions (Pro). | Titles, URLs, descriptions and tags of the bookmarks you ask it to organize. Not used to train their models under their API terms. | Only when you run AI organize |
| PostHog (EU) | Product analytics for a few server-side events: signed up, library imported. | A pseudonymous account id, the event name and counts. Never page addresses, titles or notes. | When analytics is enabled |
| Sentry | Error tracking. | Error reports with technical context (route, browser, account id). No bookmark contents by design. | When error tracking is enabled |
Not on the list
NestMarks has no advertising, tracking-pixel or data-broker providers, and no analytics runs in your browser. Saving a link makes the NestMarks server, not a third party, fetch that public page for its title and image.
Connecting GoalZen (also operated by Amanix Labs) shares only what you send there, such as a bookmark you attach to a task.
Changes
We update this page before a new subprocessor starts handling personal data. Questions: [email protected].