Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“We do not retain any biometric data or facial images provided to third-party age verification vendors.”
“We may access, preserve, and disclose any information we store if we, in good faith, believe doing so is required or appropriate to: (i) comply with law enforcement, regulatory, or national security requests...”
“If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, purchase or sale of assets...your personal information may be processed as part of such a transaction.”
“We store and process your direct messages so you can communicate directly with other users on the Bluesky App. These are unencrypted and can be accessed for Trust & Safety purposes.”
“If you do not provide your personal information when requested, you may not be able to use our Bluesky App Services if that personal information is necessary to provide you with our Bluesky App Services.”
“If you are a parent or guardian and believe your child has uploaded personal information to our site without your consent, you may contact us using the information provided below.”
Bluesky's privacy policy explains what information the platform collects about you, how it uses and shares that information, and what rights you have over your data. Almost everything you do on Bluesky — your posts, profile, likes, and follows — is public by default, and your direct messages are not encrypted, meaning Bluesky can read them. You can ask Bluesky to delete or anonymize your personal information, but if you decline to provide information Bluesky considers necessary, you may lose access to some or all of the service.
This document establishes Bluesky's data collection, processing, sharing, and retention practices for its decentralized microblogging platform. Most user activity — including posts, profiles, likes, following, and blocks — is public by design, and direct messages are stored and processed unencrypted with Bluesky retaining access for Trust & Safety purposes. Bluesky may disclose any stored information to law enforcement, regulatory, or national security requestors based on a good-faith belief standard, and may process personal information in connection with a broad range of corporate transactions including mergers, acquisitions, and asset sales. Users hold a formal right to request deletion, anonymization, or blocking of their personal information, but access to Bluesky App Services is conditioned on providing personal information that Bluesky determines necessary to deliver those services.
As a Bluesky user, your posts and most account activity are public by design and collected by Bluesky. Your direct messages are not encrypted and are accessible to Bluesky for Trust & Safety purposes, so they should not be treated as confidential. Bluesky can share your information with law enforcement or in connection with corporate transactions without your separate consent, and it makes no guarantees about the security of its services. You have the right to request deletion, anonymization, or blocking of your personal information — including on grounds of consent withdrawal or noncompliant processing — by contacting Bluesky directly.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“We do not retain any biometric data or facial images provided to third-party age verification vendors.”
“We may access, preserve, and disclose any information we store if we, in good faith, believe doing so is required or appropriate to: (i) comply with law enforcement, regulatory, or national security requests...”
“If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, purchase or sale of assets...your personal information may be processed as part of such a transaction.”
“We store and process your direct messages so you can communicate directly with other users on the Bluesky App. These are unencrypted and can be accessed for Trust & Safety purposes.”
“If you do not provide your personal information when requested, you may not be able to use our Bluesky App Services if that personal information is necessary to provide you with our Bluesky App Services.”
“If you are a parent or guardian and believe your child has uploaded personal information to our site without your consent, you may contact us using the information provided below.”
“Bluesky is a decentralized microblogging service where most user activity is public by design. This includes your posts, profile, likes, following, and blocks.”
“If you do not want to provide Personal Data we request, we may not be able to provide you with access to the Bluesky app or to specific features and functions of Bluesky.”
“Request Deletion, Anonymization or Blocking of personal information including when processing is based on your consent, or when processing is unnecessary, excessive or noncompliant...”
“We make reasonable efforts to protect your information by using physical and electronic safeguards...However, as our Services are hosted electronically, we can make no guarantees as to the security or privacy.”
“Where required by law, Bluesky may use third-party services to verify that you are old enough to access certain features or content.”
“We collect your posts. Your posts and comments are public , so exercise care when deciding what to share.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Biometric data not retained by Bluesky and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.