Privacy Notice for Our Bluesky Profile

1.What this notice covers

This page explains what happens to your data specifically when you visit or interact with Crossroutes' own profile on Bluesky. It does not describe how Bluesky itself runs the platform as a whole — that's between you and Bluesky PBLLC, governed entirely by Bluesky's own Privacy Policy(external link, opens in a new tab). We link to this page from our profile's bio because German law (Impressumspflicht) requires it to be reachable in a couple of clicks from any commercial social presence — see Section 7.

Bluesky operates on the open AT Protocol. Public posts are, by design, openly accessible data under that protocol and are not limited to visibility within Bluesky's own applications.

2.Who's responsible for what

Crossroutes is run by Lennard Zirks (business name: Software-Entwicklung Lennard Zirks), Hirtenweg 63A, 26180 Rastede, Germany — [email protected]. Full details: Legal Notice. Crossroutes is small enough that none of the Art. 37 GDPR thresholds requiring a Data Protection Officer apply, so requests go directly to the address above.

Bluesky has no comparable joint-controller framework to Meta's Facebook Page Insights, and its own account tools don't currently offer the kind of detailed audience analytics Instagram, TikTok, or X do. We're an ordinary account holder here, not a joint controller with Bluesky for anything — Bluesky (and, structurally, the open AT Protocol network it's built on) is the sole controller for the platform itself, including whatever cookies or local storage its own apps use.

3.What we actually see and do

• Replies and public quote-posts: visible to us the same way they're visible to anyone viewing the post, exactly as the platform itself shows them — and, per Section 1, generally visible to anyone on the open network, not just Bluesky users.
• Direct messages sent to our profile: read by us personally — the only recipient — and treated like any other inbound contact, used only to answer whatever you asked. We never add it to a marketing list, combine it with anything else we hold, or share it onward, except where legally required or with your consent. Bluesky does not publish a guarantee that direct messages are end-to-end encrypted. Do not send sensitive personal data via direct message; use email instead: [email protected].

We don't run ads on this profile and don't use any tracking pixel or SDK anywhere.

4.Legal basis and retention

Maintaining a public brand presence on Bluesky and responding to messages sent to it both rest on legitimate interest (Art. 6(1)(f) GDPR) — reaching and supporting the people who use or might use Crossroutes. A direct message or reply is kept only as long as it's relevant to answering it, then deleted along with the rest of our message history on the platform.

5.Your rights

For anything Bluesky processes as sole controller (the platform itself and the underlying AT Protocol network) — exercise your rights directly with Bluesky via the contact details in its own Privacy Policy. For anything we hold ourselves (a message you sent us) or questions about this notice, write to [email protected]; we respond within 30 days. You can also complain to our supervisory authority, the Landesbeauftragte für den Datenschutz Niedersachsen(external link, opens in a new tab).

6.Legal Notice (Impressum)

German law requires an easily reachable Impressum for any commercially operated social media presence. Ours is the same one that covers crossroutes.de: Legal Notice.

7.Looking for the app or website policy instead?

This page is only about the Bluesky profile itself. If you're looking for how the Crossroutes app handles your data, see the App Privacy Policy. If you're looking for how crossroutes.de itself handles visitor data, see Website Privacy.

8.Changes to this notice

If a meaningful change to how this profile is run affects this notice, we'll update it here — the "Stand" date above always reflects the current version.

9.Contact

Questions about this notice: [email protected].