Privacy Policy

Privacy Policy for Bluesky Spotlight This policy describes Bluesky Spotlight version 1.0.4 and later. Spotlight is provided by Tandem Future. It displays analytics for a public Bluesky profile inside bsky.app. 1. Public Bluesky Data You enter a public Bluesky handle. Spotlight requests that profile and its public author feed directly from Bluesky's public API. It stores profile information, post text, public engagement counts, and refresh metadata locally in your browser to build the dashboard. It does not ask for your Bluesky password, app password, or access to private messages. Older installed versions may still request public profile and feed data through our backend until they are updated. 2. Usage and Error Analytics Spotlight sends usage and error events to PostHog to help us understand usage and diagnose failures. Login and first-sync events include the public Bluesky handle you entered and, for first sync, its account identifier (DID). Events are associated with a randomly generated installation identifier stored in your browser. Events also include the extension version and technical context. Error reports can include the error message, type, stack trace, and current extension route. PostHog may process connection and device information such as your IP address, approximate region, browser, and operating system. These analytics are not anonymous: a public handle or DID can identify a Bluesky account. Automatic click tracking, session recordings, and surveys are disabled. Spotlight does not intentionally send the cached post dataset to PostHog. 3. Purposes and Third-Party Services Public Bluesky data is used to display the analytics you request. Usage and error telemetry is used to maintain and improve Spotlight. We do not sell this data or use it for advertising, creditworthiness, or lending decisions. Bluesky receives the public API requests needed to load the dashboard. PostHog receives telemetry at its EU ingestion endpoint (eu.i.posthog.com) and processes it on our behalf. These services may process data outside your country under their own terms and privacy notices. 4. Permissions and Storage Spotlight runs on bsky.app to add the analytics drawer. Access to public.api.bsky.app lets it retrieve public profiles and feeds. The storage and unlimitedStorage permissions support local preferences, the installation identifier, and the local analytics cache. Switching accounts clears the local post cache. Browser controls can remove the extension's local data. Removing Spotlight does not automatically delete telemetry already sent to PostHog. The selected profile is also stored in bsky.app's local storage; clearing that site's data removes it. 5. Your Choices and Questions You can stop further collection by disabling or uninstalling Spotlight. To ask about access to or deletion of telemetry associated with your public handle or DID, contact olof@tandemfuture.com. Do not send us a Bluesky password or app password. 6. Policy Updates We will update this page and its date when this policy changes. Contact olof@tandemfuture.com with privacy questions. This policy is governed by Swedish law.