Privacy

No TidySky server

Your scan, lists, snapshots and history are stored only in this browser. To work, your browser talks directly to Bluesky: your Bluesky server (for your follows, lists and sign-in), Bluesky's public API at public.api.bsky.app (which sees your account and the accounts being checked), Bluesky's image server for profile pictures, and bsky.social to look up your handle at sign-in. Those requests are covered by Bluesky's privacy policy.

Analytics

TidySky uses Fathom Analytics to count page visits and a few anonymous actions, like "a scan finished" or "a list was created". Fathom doesn't use cookies and doesn't collect personal data. TidySky never sends it your handle, your follows, or anything from your Bluesky account. If your browser sends Do Not Track, nothing is counted.

What TidySky asks permission to do

When you sign in, Bluesky asks you to approve these permissions. Each one is below in everyday words, followed by the technical name Bluesky sees.

• Identify your account and read it: your profile, your follow list, your lists.

  atproto

• Unfollow accounts, and follow them again if you undo. Nothing else about follows.

  repo:app.bsky.graph.follow?action=create&action=delete

• Create and delete lists on your account.

  repo:app.bsky.graph.list

• Add and remove members of your lists.

  repo:app.bsky.graph.listitem

• Read one profile at a time through Bluesky's app service, for the account being checked.

  rpc:app.bsky.actor.getProfile?aud=did:web:api.bsky.app%23bsky_appview

• Read profiles in batches through Bluesky's app service. This is how a scan checks many of your follows at once.

  rpc:app.bsky.actor.getProfiles?aud=did:web:api.bsky.app%23bsky_appview

• Read your followers through Bluesky's app service, for the "Who follows you" card.

  rpc:app.bsky.graph.getFollowers?aud=did:web:api.bsky.app%23bsky_appview

• Mute the accounts you choose.

  rpc:app.bsky.graph.muteActor?aud=did:web:api.bsky.app%23bsky_appview

• Unmute an account when you undo a mute.

  rpc:app.bsky.graph.unmuteActor?aud=did:web:api.bsky.app%23bsky_appview

What it never does

• Post, like, reply or quote for you.
• Follow anyone new.
• Read anything about accounts you don't follow, except the public profiles of your 300 most recent followers for the "Who follows you" card.
• Run when you aren't using it. There's no background process and no server.

Good to know

• Lists you create are public on Bluesky. Anyone can find them and see who's on them, the same as any list made in the Bluesky app.
• Looking a handle up at sign-in goes through https://bsky.social. That's the standard Bluesky server, used only to find your account.
• Muting hides accounts from your timeline on Bluesky; TidySky can mute and unmute, and every mute is logged locally so you can undo it.
• Your sign-in is kept in this browser by Bluesky's sign-in library, and removed when you sign out.
• Signing out doesn't delete your scan. To remove everything from this device, use Settings → Delete all TidySky data. Do that on shared computers.
• Our host, Amazon CloudFront, receives your IP address and standard request details in order to deliver pages. TidySky doesn't turn on access logging.

Deleting everything

In TidySky, go to Settings → Delete all TidySky data on this device. That removes the scan, lists, snapshots and history from your browser.

To stop TidySky from acting on your account at all, revoke its access on your Bluesky server's account page. For accounts hosted by Bluesky, that's bsky.social/account, where TidySky is listed under your approved apps with a Revoke access button. It can take up to an hour for TidySky to stop working after you revoke it. To stop it right away on this device, also sign out.

Contact

root@nate.id