Privacy Policy
Applies to the Nestmark browser extension, the website at nestmark.dev and its API.
Our promises
- Only the title and URL of a bookmark are sent to our servers, and only when you use a feature that needs them.
- We never read the content of web pages.
- We never store your bookmarks. Your bookmark library stays in your browser.
- We never sell your data, and we never use it for advertising or profiling.
What is sent, and when
| Feature | Sent | Processor |
|---|---|---|
| Auto-filing a new bookmark | Title, domain and URL without query string or fragment, plus the names of candidate folders | JEV (classification) |
| Global Reorganization (Pro) | The same fields for each bookmark being re-filed | JEV |
| Taxonomy Rebuild (Pro) | A sample of bookmark titles and domains | LLM provider (Google Gemini, through the Cline API gateway) |
| Semantic Search (Pro) | Bookmark titles and URLs, and your search text | Cloudflare Workers AI (embeddings) |
| Subscription | Your email address and plan; payment details are entered only on the Creem checkout page | Creem (payments) |
| Sign-in codes | Your email address | Resend (email delivery) |
Keyword search, duplicate and dead-link checks, export and import all run locally in your browser and send nothing.
Data we hold
- Account: your email address, sign-in method, and login sessions.
- Authentication information: hashed refresh tokens (valid for 60 days) used to keep the extension signed in.
- Usage counters (how many AI requests you used this month) and your subscription status.
Web history: titles and URLs are processed in memory to answer a request. We do not keep them. Vectors for Semantic Search are computed by the embedding provider and kept only in your browser.
Retention
We retain account data until you delete your account. Login sessions and refresh tokens expire automatically (60 days for refresh tokens). Payment and invoice records are retained by Creem under its own policy and applicable tax law. Operational logs of the Cloudflare Workers platform contain no bookmark data and are kept for the platform's standard short period.
Your choices
- You can sign out of all devices and delete your account at any time from the account page. Deletion removes your user record, sessions, tokens and usage counters, and cancels your subscription.
- Without an account you can use the free anonymous allowance; it is tied to a random install id, not to your identity.
- Uninstalling the extension removes all data stored in your browser.
Limited Use
The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements:
- We use bookmark data only to provide and improve the user-facing features described above (filing, reorganization, search).
- We do not transfer it to others except as needed to provide those features (the processors listed above), to comply with law, or as part of a merger or sale with notice to you.
- We do not allow humans to read it unless you give consent, it is necessary for security or to comply with law, and we do not use it for advertising, creditworthiness or lending.
Data categories
For the Chrome Web Store we declare: Personally identifiable information (email address), Authentication information (tokens), and Web history (bookmark titles and URLs). We do not collect website content or payment information.
Contact
Questions or requests: hello@nestmark.dev.