Privacy Policy
Introduction
Skyscraper ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our Bluesky client application handles your information when you use our service.
Data We Collect
Authentication Data: Skyscraper stores your Bluesky authentication credentials securely in your device's Keychain. We support both OAuth 2.0 (with DPoP for enhanced security) and app passwords. This credential data never leaves your device except when communicating with Bluesky's servers via the ATProtocol.
Local Cache: We cache posts, images, and profile data locally on your device using Core Data and URLCache to improve performance. This cached data is stored only on your device.
Hashtag History: We store your hashtag search history locally on your device for up to 90 days to provide search suggestions. This data remains on your device.
Post Drafts: Draft posts, including any attached images or videos, are stored locally on your device until you publish or delete them.
Direct Messages: If you use Bluesky's chat features, message data is cached locally for performance. Chat read/unread status is stored on your device.
Analytics: We use Firebase Analytics and Crashlytics to improve app stability and performance. This data is anonymized and does not include your Bluesky content or credentials. You can opt out of analytics in the app settings.
How Skyscraper Works
- Direct Communication: Skyscraper communicates directly with Bluesky's official servers using the ATProtocol for all social networking features (posts, profiles, follows, etc.).
- Skyscraper Services: We operate servers to provide additional features including push notifications, trending hashtags, and post backups. These services only receive your Bluesky identifier (DID) and feature-specific data as described in the Third-Party Services section.
- Secure Storage: Your credentials are stored securely in your device's Keychain, following Apple's best practices for secure credential management.
- Multi-Account Support: When using multiple accounts, each account's credentials are stored separately and securely in the Keychain.
Data Storage
- Local Cache: Posts, images, and profile data are cached locally on your device to improve performance and reduce network usage.
- Skyscraper Servers: Our push notification and post backup services store limited data on our servers. Push notification preferences and device tokens are stored to deliver notifications. Post backups are stored temporarily when you request a backup export.
- Data Minimization: We only collect and store data necessary to provide the specific feature you are using.
Third-Party Services
Skyscraper uses the following third-party services:
- Bluesky/ATProtocol: All social networking features communicate directly with Bluesky's official servers. See Bluesky's privacy policy at bsky.social for details.
- Firebase: We use Firebase Analytics and Crashlytics to monitor app performance and stability. This data is anonymized. Firebase Cloud Messaging is used to deliver push notifications.
- RevenueCat: We use RevenueCat to manage in-app subscriptions and purchases in the iOS/macOS app. RevenueCat receives your anonymous user identifier and purchase history. See RevenueCat's privacy policy for details.
- Stripe: We use Stripe to process payments for web subscriptions to Skyscraper Tools only. When you subscribe on the web, Stripe collects your payment information (credit card, billing address). We do not store your full credit card number on our servers. See Stripe's privacy policy for details.
- Giphy: If you search for GIFs in the post composer, your search queries are sent to Giphy's API. See Giphy's privacy policy for details.
- App Store: Distribution through Apple's App Store is governed by Apple's privacy policies.
Skyscraper Services
We operate the following services to provide additional features:
Push Notification Service (iOS/macOS App)
- Data Collected: Bluesky identifier (DID), handle, device token, platform (iOS/macOS), app identifier, locale, and notification preferences (mentions, replies, reposts, likes, follows, quotes).
- Purpose: To deliver push notifications about activity on your Bluesky account.
- Activity Subscriptions: If you subscribe to notifications for specific accounts, we store those subscription preferences to notify you when they post.
- Data Retention: Data is retained while your device is registered. You can unregister at any time through the app.
Skyscraper Tools (Web Service)
Skyscraper Tools is a web-based service at api.getskyscraper.com/tools that provides keyword alerts and account backups.
- Account Data: If you create a Skyscraper Tools account, we collect your email address and a securely hashed password (using bcrypt). We never store your password in plain text.
- Email Verification: We send verification emails to confirm your email address. These emails contain secure, time-limited tokens.
- Password Reset: If you request a password reset, we send a secure reset link to your email. Reset tokens expire after 24 hours.
Keyword Alerts
- Data Collected: Keywords you choose to monitor on Bluesky.
- Purpose: To scan public Bluesky posts for your keywords and send email notifications when matches are found.
- Email Digests: We send periodic email digests containing matching posts. You can configure digest frequency in your account settings.
- Data Retention: Keywords and alert history are retained while your account is active. You can delete keywords at any time.
Account Backup Service
- Data Collected: The Bluesky handle of the account you wish to backup.
- Purpose: To fetch and compile public posts from any Bluesky account into a downloadable archive (HTML and JSON formats).
- Data Retention: Backup files are stored temporarily on our servers. Download links expire after 36 hours, after which backup files are permanently deleted.
- Usage Limits: Backup limits depend on your subscription tier (Basic: 2/day, Premium: 10/day).
Trending Hashtags
- Data Collected: None. This service aggregates public hashtag usage from the Bluesky network.
- Purpose: To provide real-time trending hashtag data and suggestions.
All Skyscraper services communicate over secure HTTPS connections.
Bluesky Integration
Skyscraper is a third-party client for Bluesky:
- All posts, messages, and profile data are stored on Bluesky's servers, not ours
- We use the official ATProtocol to communicate with Bluesky
- Your Bluesky data is subject to Bluesky's privacy policy and terms of service
- We do not modify or intercept your communications with Bluesky
Children's Privacy
Skyscraper is a client for Bluesky, which has its own age requirements and privacy policies. We do not knowingly collect personal information from children. Parents should review Bluesky's terms of service and privacy policy before allowing children to use the service.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page and will be effective immediately upon posting. We encourage you to review this Privacy Policy periodically.
Data Security
We take data security seriously:
- Credentials are stored securely in the iOS/macOS Keychain with encryption
- All communication with Bluesky uses secure HTTPS connections
- We recommend using app passwords (not your main Bluesky password) for additional security
- Keep your device updated with the latest iOS/macOS security updates
Your Rights
You have the following rights regarding your data:
- Access: Your Bluesky data is accessible through your Bluesky account
- Deletion: You can delete the app to remove all locally cached data and stored credentials
- Portability: Your Bluesky data is portable through Bluesky's official export features
- Account Management: You can manage your Bluesky account directly at bsky.app
App Permissions
Skyscraper requests the following permissions:
- Network Access: Required to communicate with Bluesky servers and Skyscraper services
- Photo Library Access: Optional - requested only when you choose to attach images or videos to your posts
- Notifications: Optional - for push notifications about mentions, replies, likes, follows, and messages
All permissions are requested only when needed and you can revoke them at any time in your device settings.
Contact Information
If you have any questions about this Privacy Policy, please contact us at:
Email: contact@getskyscraper.com
Jurisdiction
This Privacy Policy is governed by the laws of the State of Indiana. Any disputes related to this policy will be resolved in the courts of the State of Indiana.
Last Updated: December 31st, 2025