77 Total
14 High severity
52 Medium severity
11 Low severity

Key Facts

Does Bluesky retain biometric data provided to third-party age verification vendors?
Bluesky does not retain any biometric data or facial images provided to third-party age verification vendors.
Does Bluesky retain facial images provided to third-party age verification vendors?
Bluesky does not retain any biometric data or facial images provided to third-party age verification vendors.
May Bluesky access, preserve, and disclose stored information if it believes in good faith that doing so is required or appropriate to comply with law enforcement, regulatory, or national security requests?
Bluesky may access, preserve, and disclose any stored information if it believes in good faith that doing so is required or appropriate to comply with law enforcement, regulatory, or national security requests.
May Bluesky process your personal information as part of a merger, acquisition, financing, reorganization, bankruptcy, receivership, or purchase or sale of assets?
Bluesky may process your personal information as part of a merger, acquisition, financing, reorganization, bankruptcy, receivership, or purchase or sale of assets.
How does Bluesky store and process direct messages?
Bluesky stores and processes direct messages unencrypted and can access them for Trust & Safety purposes.
Can Bluesky access direct messages for Trust & Safety purposes?
Bluesky stores and processes direct messages unencrypted and can access them for Trust & Safety purposes.
Can you use Bluesky App Services if you do not provide necessary personal information?
Bluesky states that if you do not provide personal information when requested, you may not be able to use Bluesky App Services if that personal information is necessary to provide those services.
What can a parent or guardian who believes their child has uploaded personal information without consent do?
Bluesky allows a parent or guardian who believes their child has uploaded personal information without consent to contact Bluesky to address that concern.
What is Bluesky?
Bluesky is a decentralized microblogging service where most user activity — including posts, profile, likes, following, and blocks — is public by design.
Is user activity on Bluesky public by design?
Bluesky is a decentralized microblogging service where most user activity — including posts, profile, likes, following, and blocks — is public by design.
Stay ahead of the changes
Track Bluesky and get the diff the day its terms change.
Summary

Bluesky's privacy policy explains what information the platform collects about you, how it uses and shares that information, and what rights you have over your data. Almost everything you do on Bluesky — your posts, profile, likes, and follows — is public by default, and your direct messages are not encrypted, meaning Bluesky can read them. You can ask Bluesky to delete or anonymize your personal information, but if you decline to provide information Bluesky considers necessary, you may lose access to some or all of the service.

Analysis

This document establishes Bluesky's data collection, processing, sharing, and retention practices for its decentralized microblogging platform. Most user activity — including posts, profiles, likes, following, and blocks — is public by design, and direct messages are stored and processed unencrypted with Bluesky retaining access for Trust & Safety purposes. Bluesky may disclose any stored information to law enforcement, regulatory, or national security requestors based on a good-faith belief standard, and may process personal information in connection with a broad range of corporate transactions including mergers, acquisitions, and asset sales. Users hold a formal right to request deletion, anonymization, or blocking of their personal information, but access to Bluesky App Services is conditioned on providing personal information that Bluesky determines necessary to deliver those services.

What this means for you

As a Bluesky user, your posts and most account activity are public by design and collected by Bluesky. Your direct messages are not encrypted and are accessible to Bluesky for Trust & Safety purposes, so they should not be treated as confidential. Bluesky can share your information with law enforcement or in connection with corporate transactions without your separate consent, and it makes no guarantees about the security of its services. You have the right to request deletion, anonymization, or blocking of your personal information — including on grounds of consent withdrawal or noncompliant processing — by contacting Bluesky directly.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Featured, High severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

77 provisions
12 featured
14 clause types
14 high severity
Restricted or Prohibited Content/Industries 1 1 high
Targeting and Audience Restrictions 1 1 high
AI / Automated Decision-Making 1
Acceptable Use Restrictions 1
Stay ahead of the changes

Monitoring

Bluesky has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Biometric data not retained by Bluesky and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 5, 2026 06:17 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000540
Version ID CA-V-001245
SHA-256 51663972bd8dfd348606bf98fdef52ccb08dcbef868cd8dfa4bca13b12cc0b4e
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans