Back

Privacy Policy

Last updated: August 26, 2026

This Privacy Policy explains how Bluesky Wrapped (the "Service") collects, uses, discloses, and otherwise processes personal data when you visit or use the Service. It also describes the choices and rights available to you.

Olof Harrysson operates the Service and is the controller of the personal data described in this Privacy Policy. References to "we", "us", or "our" mean Olof Harrysson. You may contact us at olof@tandemfuture.com.

1. Scope of this Privacy Policy

This Privacy Policy applies to information processed through the Service at blueskywrapped.madebyolof.com. It does not govern Bluesky, the AT Protocol, Vercel, PostHog, or any other third-party website or service. Those parties process information under their own privacy notices.

2. Personal Data We Process

Information you provide

  • A Bluesky handle or search query that you enter into the Service.
  • A rating and any written feedback you choose to submit through the optional survey.
  • Your email address and the contents of your message if you contact us.

Public Bluesky information

When a handle is submitted, the Service retrieves information made publicly available through Bluesky and the AT Protocol. This may include a decentralized identifier (DID), handle, display name, avatar, public profile information, public posts, post timestamps, links, media metadata, engagement counts, and public interactions with other accounts.

Generated Wrapped information

The Service derives statistics and summaries from public Bluesky information, such as posting activity, engagement, frequently used words, links and domains, posting patterns, top posts, and accounts with which the profile interacted. These results may constitute personal data even when derived from public sources.

Technical and usage information

Our hosting and analytics providers may process technical and usage information automatically, including IP address, device and browser type, operating system, referral URL, pages viewed, interactions with the Service, approximate location derived from network information, timestamps, and diagnostic or security logs. PostHog may use first-party cookies, local storage, or similar technologies and may provide session replay where enabled in our analytics settings.

3. How We Obtain Personal Data

We obtain personal data:

  • directly from you when you use the Service or contact us;
  • from public Bluesky and AT Protocol application programming interfaces;
  • automatically from your browser or device through the operation of the Service and analytics technologies; and
  • from service providers that host, secure, monitor, or analyze the Service on our behalf.

4. Purposes and Legal Bases

We process personal data for the following purposes:

  • Providing the Service. We process submitted handles, public Bluesky information, and generated statistics to create, save, display, and share Wrapped results. We rely on the performance of our Terms of Service where applicable and on our legitimate interest in providing the requested Service.
  • Operating and securing the Service. We process technical logs and related information to maintain availability, prevent abuse, troubleshoot errors, and protect the Service. We rely on our legitimate interests in operating a reliable and secure service.
  • Analytics and improvement. We use usage data, survey ratings, and feedback to understand how the Service is used and to improve it. We rely on our legitimate interests in product development and, where applicable law requires consent for a particular technology, on your consent.
  • Communications and legal compliance. We process messages you send us to respond to requests, establish or defend legal claims, and comply with applicable law. The legal basis is our legitimate interests or compliance with a legal obligation, as applicable.

Where we rely on legitimate interests, we consider whether those interests are overridden by your rights and freedoms. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Public Results and Search Engines

Wrapped result pages are public. They may be viewed by anyone who knows or discovers the relevant handle and year, shared on social media, included in our sitemap, indexed by search engines, and cached by browsers, content delivery networks, social platforms, or search providers. Generated social-sharing images are also stored at publicly accessible URLs.

Please do not generate or share a result if you are not comfortable with that result being public. If a result relates to you and you would like us to remove it from the Service, contact us using the details below. Removal from our systems may not remove copies already cached or independently shared by third parties.

6. How We Disclose Personal Data

We may disclose personal data to:

  • Vercel, which provides hosting, serverless computing, content delivery, security, logging, and Blob storage;
  • PostHog, which provides product analytics and processes optional survey responses;
  • Bluesky and AT Protocol services, which receive profile searches and API requests necessary to retrieve public information;
  • professional advisers, authorities, courts, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or establish or defend legal claims; and
  • a successor or prospective successor in connection with a reorganization, sale, transfer, or other change involving the Service, subject to appropriate safeguards.

We do not sell personal data or use Wrapped information for cross-context behavioral advertising.

7. International Transfers

Our service providers may process personal data in Sweden, elsewhere in the European Economic Area, the United States, and other countries. Where personal data is transferred outside the EEA to a country that has not been recognized as providing an adequate level of protection, we rely on safeguards made available by our service providers, such as the European Commission's Standard Contractual Clauses or an applicable adequacy framework.

8. Retention

Saved Wrapped statistics and generated sharing images are generally retained for as long as the Service continues to provide historical Wrapped results, unless removal is requested or a shorter period is required by law. Analytics, survey, security, and diagnostic data are retained according to the settings and retention periods of the relevant provider. Correspondence is retained for as long as needed to respond, maintain appropriate records, or establish or defend legal claims.

We may retain information for longer where reasonably necessary to comply with law, resolve disputes, enforce agreements, or protect the Service. We may retain aggregated or de-identified information that can no longer reasonably identify an individual.

9. Security

We use reasonable technical and organizational measures designed to protect personal data. Saved Wrapped JSON records are held in access-controlled storage, while only the result pages and generated sharing images are intentionally made public. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

10. Your Rights and Choices

Subject to applicable law, you may have the right to request access to, correction of, deletion of, or restriction of personal data; receive certain personal data in a portable format; object to processing based on legitimate interests; and withdraw consent where processing is based on consent.

You may also control cookies and similar technologies through your browser settings. Blocking them may affect analytics or parts of the Service. To exercise a privacy right or request removal of a Wrapped result, email olof@tandemfuture.com. We may need information reasonably necessary to locate the relevant data and verify your request.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another competent supervisory authority.

11. Children

The Service is not directed to children under 13, and we do not knowingly solicit personal data directly from children under 13. If you believe that a child's personal data appears in a saved Wrapped result and should be removed, please contact us.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated date. Material changes will apply prospectively unless applicable law requires otherwise.

13. Contact

Questions, privacy requests, and removal requests may be sent to:

Olof Harrysson
Email: olof@tandemfuture.com