Privacy Policy

Account and Bluesky connection

When you sign in, Conspicuous creates or updates a local account and profile. We store your Bluesky decentralized identifier (DID), handle, display name, avatar and banner URLs, biography, public profile counts, and connection timestamps. These public profile details may appear in Conspicuous.

Bluesky OAuth does not give us your email address. We use an internal placeholder address for that login. If you choose the app-password login, Bluesky may return your account email, which is stored with your account. We process the app password to sign you in and store the resulting session credentials; the login code does not retain the app password itself.

We retain OAuth access and refresh credentials and proof-of-possession keys, or app-password session tokens, to keep your connection working. OAuth approval currently includes general Bluesky access and chat access. We use that connection to load your feeds and conversations and carry out actions you request, such as posting, replying, liking, following, or sending messages. Signing in does not subscribe you to beta marketing emails.

Your activity and saved content

We process the posts, profiles, notifications, and conversations you open. Saved items, drafts, collections, and associated source links can be stored with your account. Workspace tabs, pinned feeds, playback preferences, and other interface state may be stored in your browser.

Posts and replies you publish to Bluesky are subject to that network’s visibility rules. Recipients receive messages you send. Deleting your Conspicuous account does not remove content already published or delivered through another service.

Beta signup and emails

If you join the beta list, we store the email you submit, signup source and campaign, consent version and time, optional network-announcement consent, confirmation status, invitation and account-linking status, and unsubscribe preferences. Delivery records help us send confirmations, invitations, and onboarding messages and opted-in network announcements without duplicates and diagnose delivery failures.

Campaign messages include an unsubscribe link. Unsubscribing stops campaign emails; it does not delete your account. Account, security, and requested service messages are separate. We retain suppression information so an unsubscribed address is not added back to campaign sends accidentally.

We use time-limited hashed identifiers derived from IP and email addresses to limit signup abuse.

Reader, RSS, and external media

Opening an article in the reader sends its URL to our server to retrieve and extract the page. Article content and metadata may be cached. A publisher may see requests from our servers. Visiting the original article, loading remote images, or playing embedded media can also disclose your IP address and browser information to that provider.

RSS content and connected media services are processed when those features are available and you use them. Connecting Spotify, for example, stores connection credentials and the account information needed for its playback and playlist features. Adding a future network requires its own connection; signing in with Bluesky does not connect other accounts.

Cookies and browser storage

We use cookies for authentication, sign-in security, and connection state. Browser storage also remembers interface preferences and local workspace data. Clearing site data removes local preferences and can sign you out, but does not erase server records.

The current application does not load a first-party advertising pixel or marketing analytics script. External embeds and linked services have their own storage practices. The storage notice is informational and does not block third-party embeds.

Service providers and disclosure

Hosting, database, and email delivery providers process data to operate Conspicuous. Production email delivery uses Amazon Web Services. Connected networks receive requests and content necessary for the actions you initiate. External publishers and media providers process requests under their own policies.

Authorized operators may access records to support accounts, investigate abuse, and fulfill privacy requests. We may disclose information when required by law or needed to protect users and the service. We do not sell personal information or use it for cross-context behavioral advertising.

Retention and security

Account and saved-content records remain while your account is in use or until a verified deletion request is fulfilled. Connection credentials remain until removed or invalidated. Signing out alone does not delete your account or all stored connection records. Temporary OAuth authorization state expires after about ten minutes.

There is not yet an automatic deletion schedule for inactive beta accounts. You can request deletion at any time. Some records may need to be retained for legal obligations, security, or email suppression. Backup copies may remain until replaced under the hosting provider’s backup lifecycle.

We restrict access to account and connection data. No service can guarantee absolute security. This policy does not promise that every stored field is encrypted.

Your choices and privacy requests

You can request access, correction, deletion, or a portable copy of your personal information. The available account export is partial; contact us for a request covering additional stored records. We may need to verify account ownership using your Bluesky identity or a confirmed email before releasing or deleting data. Never send us your password or access tokens.

Contact the privacy address below and identify your Bluesky handle and the request. You can also revoke Conspicuous access through your network’s connected-app controls, or revoke an app password through its app-password controls. Revocation prevents further authorized access but does not erase our existing records.

Depending on where you live, you may have additional rights, including objection, restriction, withdrawal of consent, and complaint to your local data protection authority. We respond within the deadlines applicable to your request.

Children and policy changes

Conspicuous is not intended for children under 13. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.

We update this notice when the service or its data practices change. The revision date identifies the current version; material changes will be communicated through the service or an available account contact.

Contact

Privacy requests: privacy@wrkhrs.co.

Deletion instructions · Bluesky privacy policy · Terms of Service