Privacy Policy

1. Who we are

nestjs.io is run by the maintainers at github.com/nestjs-io as a free, community-oriented directory for the NestJS ecosystem. We try to collect as little personal data as possible — only what's needed to make accounts and the newsletter work.

2. Information we collect

If you sign in with GitHub: we receive your GitHub username, avatar, public profile information, and the email address associated with your GitHub account. We never see or store your GitHub password.

If you subscribe to the newsletter: we store the email address you provide together with your subscription preferences.

Content you submit: package suggestions, bookmarks, and any other content you actively post.

Automatically collected: standard server logs (IP address, user-agent, requested URL, timestamps) for security and abuse prevention, plus anonymized usage analytics (pages visited, country) via Vercel Analytics. We do not use third-party advertising trackers.

3. How we use your information

• Authenticate your session and remember your bookmarks
• Send the newsletter you opted into
• Display content you publicly post (profile)
• Detect and prevent abuse, spam, and bots
• Understand aggregate, anonymized traffic patterns to improve the site

We do not sell your personal data, and we do not run targeted advertising.

4. Service providers we use

Running nestjs.io requires sharing limited data with the following processors, each of which has its own privacy policy:

• GitHub — OAuth sign-in. GitHub returns the profile data listed above. See GitHub's privacy statement.
• Vercel — application hosting and anonymized analytics. See Vercel's privacy policy.
• Neon — managed Postgres database that stores accounts, bookmarks, and ecosystem data.
• Resend — newsletter delivery. Receives the email address and preferences you submitted via the subscribe form.
• Cloudflare Turnstile — bot/abuse protection on submission forms. Receives a session token and minimal request metadata.
• Cloudflare R2 — object storage for uploaded files (e.g., package or profile imagery).
• OpenAI — used to classify articles in our feed into topical categories. We send the article title, URL, and a short content excerpt; we do not send personal data.
• Discord — webhook notifications to maintainers about submissions and moderation events. Submission metadata only; no end-user account credentials.

We do not share your personal information with third parties for purposes other than operating the site, unless required by law.

5. Cookies and local storage

We use cookies and local storage to keep you signed in and to remember preferences such as your theme. We do not use third-party advertising or cross-site tracking cookies.

6. Your rights

You can:

• Access a copy of the data we hold about you
• Correct inaccurate information
• Delete your account and associated personal data
• Unsubscribe from the newsletter at any time via the link in each email
• Withdraw consent and stop using the site

To exercise any of these rights, email . Some data may be retained for a short period afterward when required for security, abuse prevention, or legal reasons.

7. Data retention

We keep account data while your account is active. When you delete your account, we remove your personal data or anonymize it, except where retention is required by law or for legitimate security purposes (server logs are typically kept for 30–90 days).

8. Children

nestjs.io is not intended for children under 13, and we do not knowingly collect data from them.

9. Changes to this policy

We may update this policy. The "Last updated" date at the top reflects the most recent change. Significant changes will be highlighted on the site or sent by email if you subscribe to the newsletter.

10. Contact

For questions about this policy, email or open an issue at github.com/nestjs-io.