Bluesky · Bluesky Terms of Service · View original document ↗

Decentralized Content Deletion Caveat

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Bluesky Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Deleting your Bluesky account does not guarantee your posts are removed from all apps built on the AT Protocol; those third-party services operate independently and may retain your content.

This analysis describes what Bluesky's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Users who delete their accounts expecting full erasure of their content may find that posts persist on other AT Protocol applications, which has direct implications for data subject rights under GDPR and CCPA.

Consumer impact (what this means for users)

Even after you delete your Bluesky account, your posts may continue to exist on other AT Protocol services, and Bluesky explicitly disclaims responsibility for those copies, meaning you must contact each third-party service individually to request removal.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Submit an account deletion request through your Bluesky account settings or contact support@bsky.app. Be aware that you must separately contact any third-party AT Protocol services where your content may persist, as Bluesky cannot compel those services to remove your content.

How other platforms handle this

Mistral AI Medium

These Additional Terms apply only to the Mistral AI Products available on the Mistral AI Infrastructure and provided to customers located in the European Union that are subject to the EU Data Act (as defined below). These Additional Terms shall take effect on 12 September 2025 (the "Effective Date")...

WhatsApp Medium

Managing And Deleting Your Information. You have the right to access, correct, or delete your information in certain circumstances. We store information until it is no longer necessary to provide our Services or until your account is deleted, whichever comes first. You can delete your WhatsApp accou...

Perplexity AI Medium

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete your personal information, the right to data portability, and the right to opt out of certain data processing activities. To exercise these rights, please co...

See all platforms with this clause type →

Monitoring

Bluesky has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Due to the decentralized nature of the AT Protocol, we cannot control or force other services and Developer Applications on the AT Protocol to treat your Content in a particular way and some posts may continue to exist on these services that are outside our control. That means that complete deletion across the network may not always be possible. Bluesky is not responsible for Content you've shared on other services that use the AT Protocol. To request removal from those services, contact them directly.

— Excerpt from Bluesky's Bluesky Terms of Service

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: The GDPR right to erasure (Article 17) and the CCPA right to deletion may be difficult to operationalize where content persists across a decentralized network beyond Bluesky's control. Regulatory guidance from the European Data Protection Board and national data protection authorities has addressed controllers' obligations to make reasonable efforts to notify processors and third parties of deletion requests, but the extent of obligation where architectural constraints exist is an evolving area. (2) GOVERNANCE EXPOSURE: High for organizations with EU or California users. The acknowledgment that complete deletion may not always be possible creates a structural tension with data subject rights frameworks that require effective erasure. Regulators may view the inability to fulfill deletion requests as a compliance gap regardless of the technical constraint. (3) JURISDICTION FLAGS: EU/EEA users have the strongest statutory right to erasure, and data protection authorities in Germany, France, Ireland, and other member states have actively enforced deletion rights against platform operators. California CCPA deletion rights similarly create exposure. Organizations relying on Bluesky for communications involving personal data of residents in these jurisdictions should assess the deletion gap. (4) CONTRACT AND VENDOR IMPLICATIONS: If Bluesky is used in a B2B context, data processing agreements between organizations and Bluesky should address the decentralized deletion limitation. Standard DPAs typically require processors to delete data on instruction; Bluesky's architectural constraint may not satisfy that requirement. (5) COMPLIANCE CONSIDERATIONS: Organizations should implement internal guidance advising users not to post personal data of third parties on Bluesky where deletion assurance is required. Data mapping should reflect the possibility that personal data in user content may persist on AT Protocol third-party services beyond Bluesky's control.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC may assess whether Bluesky's disclosure of decentralized deletion limitations is adequate to inform consumers about the practical limits of data deletion, relevant to consumer protection standards.
    File a complaint →
  • State AG
    State attorneys general in California may evaluate whether the decentralized deletion limitation is consistent with CCPA deletion rights for California residents.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN

Provision details

Document information
Document
Bluesky Terms of Service
Entity
Bluesky
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 10, 2026
Record ID
CA-P-008610
Document ID
CA-D-00539
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
1f9848d00d7dd1a2e10d568b4985faea4042732fb12fd989f196ebde39969a72
Analysis generated
May 7, 2026 21:18 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Bluesky
Document: Bluesky Terms of Service
Record ID: CA-P-008610
Captured: 2026-05-07 21:18:23 UTC
SHA-256: 1f9848d00d7dd1a2…
URL: https://conductatlas.com/platform/bluesky/bluesky-terms-of-service/decentralized-content-deletion-caveat/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Bluesky's Decentralized Content Deletion Caveat clause do?

Users who delete their accounts expecting full erasure of their content may find that posts persist on other AT Protocol applications, which has direct implications for data subject rights under GDPR and CCPA.

How does this clause affect you?

Even after you delete your Bluesky account, your posts may continue to exist on other AT Protocol services, and Bluesky explicitly disclaims responsibility for those copies, meaning you must contact each third-party service individually to request removal.

Is ConductAtlas affiliated with Bluesky?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Bluesky.