Privacy Policy

Last updated: 2026-06-17

skymeetsblue (the "Service") is a discovery service that helps you find people worth following on Bluesky (AT Protocol) based on shared interests. This policy describes the information we collect and how we handle it.

Information we collect

Account information: your Bluesky DID, handle, display name, avatar, banner, bio, and other public profile data.
Public posts: your public posts on Bluesky, retrieved to analyze your interests, topics, and activity patterns.
Participation settings: your opt-in status, "discoverable" setting, and optional message. Some of these are stored as a public record (com.skymeetsblue.optIn) on Bluesky / AT Protocol. Public records may be retrieved and stored by third parties.
Activity records: follow, "not interested", view, click and similar actions on candidates.
Authentication / session: OAuth credentials, access and refresh tokens, and a signed session cookie used to keep you logged in.
Technical information: IP address, user agent, access timestamps, error logs, and other data needed to operate, maintain, and protect the Service.

How we use information

To analyze public posts and estimate interests, topics, and activity patterns.
To generate embeddings, summaries, classifications and scores used to present follow candidates.
To show your own analysis results and candidates to you.
To display users who have enabled "discoverable" as candidates to other members.
To provide, improve, maintain, and troubleshoot the Service.
To prevent abuse, spam, excessive load, and violations of the terms.
To comply with applicable law or requests from public authorities.

AI analysis & external services

To analyze interests and generate summaries, classifications and embeddings, we may send your public post text and other necessary information to Google's Gemini API.

We use the Gemini API as a paid service with Cloud Billing enabled. Google's handling of data, logging, and safety processing on its side is governed by Google's terms and policies.

We do not intend to retain the original text of public posts long-term in our database. We store analysis results, summaries, classifications, numeric indicators, and embedding vectors to the extent needed to present candidates.

AI-generated results are machine-produced estimates and do not accurately evaluate a person's character, beliefs, creditworthiness, abilities, attributes, or relationships with others.

Disclosure & processors

We do not sell or disclose collected information to third parties except:

with your consent;
to external services such as the Gemini API that are necessary to provide the Service;
where required by law;
where necessary to address abuse, rights infringement, or security issues.

Using external services may involve transferring, storing, or processing information with providers or servers located outside Japan.

Discoverable setting & candidate display

You control whether you appear as a candidate to other members via the "discoverable" setting.

When disabled, you are, in principle, not shown as a follow candidate to other members. We may still retain or use certain information to present candidates to you, prevent abuse, maintain the system, or comply with law. Only members who have joined and enabled "discoverable" are shown as follow candidates.

Follow actions

Any follow or similar action taken from your account is based on your own action or explicit consent. We do not perform unintended automatic follows, posts, mentions, or similar actions.

Cookies

We use a signed session cookie to keep you logged in and manage sessions. We do not use third-party tracking cookies.

Data retention

We retain information while you use the Service, to the extent needed to provide it.

When you use "Withdraw (delete data)" in the Service, we delete your participation record and the analysis data we hold within a reasonable period. We may retain some information for a limited period for abuse prevention, legal compliance, dispute handling, security, backups, and log management.

Withdrawal or data deletion does not delete your own account, posts, follow relationships, or other data on Bluesky.

Revoking authorization

You can revoke the Service's OAuth authorization via Bluesky or your PDS settings. Doing so may make some or all of the Service unavailable.

Security

We take reasonable and appropriate measures to protect collected information against unauthorized access, leakage, loss, or damage.

Changes to this policy

We may revise this policy as needed. We will announce material changes within the Service. The revised policy takes effect when displayed within the Service.

Contact

For questions about this policy, contact @so-asano.com.

← Back to skymeetsblue