Bluesky
Weighted across nine legal categories. Lower is worse.
Executive summary
Bluesky's Terms of Service show a mixed risk profile typical of decentralized social platforms. Strengths include transparent user content ownership with limited licensing, reasonable acceptance terms, and clear eligibility requirements. Significant weaknesses emerge in dispute resolution (mandatory arbitration with class waiver, though mitigated by local venue and carve-outs), low liability caps ($100), broadly-scoped indemnification triggered by mere service use, and weak modification procedures. The document appropriately acknowledges AT Protocol's decentralized nature and includes regional carve-outs for Brazil and EU mandatory law. Overall, protections favor the platform over individual users.
Category breakdown
Acceptance of Terms & Scope
Contract formation and service boundaries
Direct acceptance mechanism via browsewrap with clear notice. Age requirement explicitly stated (13+) with mention of potential age assurance processes. Scope well-defined to Bluesky app/website/services, with explicit exception for Developer Applications on AT Protocol. Language is plain and structure is logical.
Key findings
- Clear, prominent acceptance statement with specific reference to T&C
- Age requirement clearly stated: minimum 13 years old
- Scope boundaries well-defined; distinguishes Bluesky-governed services from independent Developer Apps
- Terms cover application, website, and services comprehensively
- Appropriate acknowledgment of AT Protocol's decentralized architecture
Evidence from the document
By accessing or using Bluesky, you agree to be bound by these Terms.
To use Bluesky, you must be at least 13 years old and meet the minimum age required by your local laws to enter into a binding agreement.
These Terms only apply to social networking that happens on Bluesky. If you're using another social networking application on the AT Protocol that isn't Bluesky Social...the terms and conditions of that Developer Application will govern your experience.
Recommendations
- Add brief summary of key rights and obligations before acceptance
- Consider implementing affirmative checkbox for age 13+ confirmation
- Provide side-by-side comparison for users switching from/to Developer Apps
User Accounts
Registration, suspension, and termination
Users have full control to delete accounts anytime via settings, which is consumer-favorable. However, Bluesky can suspend or terminate 'without prior notice' based on broad criteria including vague 'reputational risk' language. A two-week appeal window exists with in-app or email process, plus EU/EEA access to dispute settlement bodies and courts. The absence of advance cure periods and the 'without notice' language are concerning, but the appeal mechanism provides meaningful recourse.
Key findings
- User termination right is immediate and unrestricted (delete anytime via settings)
- Company termination requires no notice and uses vague criteria ('reputational risk', 'platform integrity')
- Appeal process exists but limited to two-week window
- Data retention upon termination specified as necessary for trust/safety and legal compliance
- EU/EEA users have additional appeal channels via certified dispute bodies and national courts
Evidence from the document
We may suspend, restrict, or terminate your Account...at any time, without prior notice, if: You violate these Terms...We are legally required to do so...We believe that your continued access poses a risk to Bluesky, to other users, or to third parties, including in cases involving safety, legal exposure, reputational risk, or platform integrity.
Appeals must be filed within two weeks of the account suspension, termination, or restriction you seek to appeal.
If you're in the EU or EEA, you have the right to challenge Bluesky's content-moderation or account decisions through various channels
Recommendations
- Define what constitutes 'reputational risk' and 'platform integrity' concerns with specificity
- Provide advance notice (7-14 days) before termination except in safety emergencies
- Extend appeal window to 30 days or allow late appeals with written justification
- Offer graduated enforcement (warning, restriction, then termination) for non-urgent violations
Intellectual Property & UGC
Content ownership and licensing
Bluesky explicitly confirms users retain ownership of their content, grant only a limited non-exclusive license, and commits never to sell content without permission. License scope includes operation, display, adaptation, and third-party moderation tools, justified for platform functionality. The main concern is the broad modification rights ('modify, adapt, distribute'). The AT Protocol's decentralized nature prevents guarantee of network-wide deletion, a legitimate technical limitation appropriately disclosed.
Key findings
- User ownership retention explicitly stated and unambiguous
- License is limited, non-exclusive, and royalty-free
- Content uses clearly enumerated: operation, adaptation, third-party tools, policy enforcement
- Explicit prohibition on sale of user content without consent
- Content modification rights are broad but justified for platform operation (e.g., device resizing)
- AT Protocol decentralization caveat properly disclosed; Bluesky not responsible for content on other services
Evidence from the document
You retain ownership of your Content on the Bluesky application and website. Bluesky does not claim rights to your Content, except for the limited rights you grant us under this license.
We will never sell your Content without getting your permission first.
Due to the decentralized nature of the AT Protocol, we cannot control or force other services and Developer Applications on the AT Protocol to treat your Content in a particular way and some posts may continue to exist on these services that are outside our control.
Recommendations
- Define limits on 'promotional materials' or exclude commercial use in promotions
- Specify that modifications must be minimally necessary for platform operation
- Offer granular content-use controls (e.g., opt-out of specific features like recommendation use)
- Establish data deletion timelines for content on external AT Protocol services
Data Privacy
Data collection, usage, and protection
Privacy details are heavily deferred to the separate Privacy Policy document, limiting what can be assessed from the T&C alone. The T&C confirms data retention only for 'trust and safety, legal compliance, or other legitimate purposes' and promises compliance with applicable privacy laws. This design (separate privacy document) is standard industry practice but prevents full scoring. The EU/EEA compliance framework and reference to legal obligations suggest good-faith data handling, but comprehensive assessment requires reading the Privacy Policy.
Key findings
- Data retention limited to trust/safety and legal compliance per Privacy Policy
- Proactive moderation using automated tools and hashes of known illegal content mentioned
- EU/EEA regulatory contacts provided for Digital Services Act compliance
- Multiple contact methods for user data issues
- Relies on separate Privacy Policy for detailed data practices
Evidence from the document
we will retain your Personal Data in accordance with our Privacy Policy and only as necessary for trust and safety, legal compliance, or other legitimate purposes.
Competent authorities of the EU and EU Member States that want to contact Bluesky under the Digital Services Act can obtain the necessary contact details
Recommendations
- Summarize key privacy commitments in T&C (data minimization, retention periods, third-party sharing)
- Include specific mention of encryption standards or data security measures
- Clarify children's data handling (13+ users) and parental controls
- Define scope of 'trust and safety' data retention with concrete examples and timelines
Payment & Subscriptions
Billing and subscription management
No payment or subscription terms are present in this T&C. Bluesky appears to operate as a free service with no mentioned billing, auto-renewal, refunds, or subscription tiers. The absence of problematic payment clauses that plague many subscription services (hidden fees, difficult cancellation, auto-renewal without consent) is inherently consumer-favorable. Score reflects neutral-positive assessment: no exploitation possible when no payment relationship exists.
Key findings
- No pricing, subscription tiers, or billing terms mentioned
- No auto-renewal clauses or payment procedures
- No refund or proration policies
- Service appears to be free at point of use
- May monetize through advertising or future premium features not detailed here
Evidence from the document
No payment or subscription terms found in document
Recommendations
- If Bluesky introduces premium features or paid services, apply this rubric's full framework
- If advertising becomes revenue model, add transparency about data monetization and user control
- Pre-disclose any future subscription plans to maintain user trust
Limitation of Liability
Risk allocation and legal protection
Bluesky uses broad warranty disclaimers ('as is' and 'as available' basis) and excludes indirect, consequential, and punitive damages. The monetary cap is set at only $100, extremely low for a communication platform where service failure or data loss could cause significant harm. Third-party claims are completely excluded. Offsetting these concerns: exceptions exist for death/injury from fraud, gross negligence, or willful misconduct; statutory rights cannot be waived; and the cap respects jurisdictional limits. The $100 figure is the primary problem.
Key findings
- All express and implied warranties disclaimed
- Cap on liability set at only $100 (substantially below industry norms for service value)
- Third-party claims completely excluded
- Indirect and consequential damages (lost profits, data loss) excluded
- Exceptions for death/injury from fraud or gross negligence partially protect consumers
- Statutory rights explicitly preserved as non-waivable
Evidence from the document
TO THE FULLEST EXTENT PERMITTED BY LAW, WE EXPRESSLY DISCLAIM ALL WARRANTIES, including: Implied warranties of merchantability, fitness for a particular purpose, non-infringement...Any guarantee that Bluesky Social will be uninterrupted, timely, secure, error-free, or meet your expectations or requirements.
Bluesky's total cumulative liability for all claims arising out of or related to these Terms...is limited to one hundred U.S. dollars (US$100).
All third-party claims are expressly excluded from Bluesky's liability
Recommendations
- Raise liability cap to at least 12 months of fees (if paid) or $1,000 minimum
- Carve out specific categories: data loss/corruption, account security failures, defamation
- Exclude liability limitation for security breaches caused by company negligence
- Clearly list what constitutes 'third-party claims' with examples
Indemnification
Legal responsibility allocation
The indemnification clause is substantively problematic. It is triggered by mere 'access to or use of Bluesky Social' rather than actual breach or wrongdoing, making it non-fault-based. The scope is extremely broad ('in any way related to' user's use), covers user content, and extends liability to all affiliates. Bluesky reserves exclusive control of defense while user pays bills. No reciprocal company-to-user indemnity exists. This is a classic one-sided indemnity that shifts all litigation risk to users without requiring fault, approaching unconscionability in many jurisdictions.
Key findings
- Trigger is mere 'access to or use of Bluesky Social', not breach-gated, no fault required
- Covers user content, policy violations, actions through services, and third-party rights violations
- Expanded scope language: 'in any way related to' (highly expansive)
- Long list of indemnified parties: affiliates, officers, directors, employees, agents
- Bluesky controls exclusive defense while user pays ('reasonable legal and accounting fees')
- No explicit carve-out for Bluesky's own negligence or misconduct
- One-way indemnity with no reciprocal company protection for users
Evidence from the document
You agree to indemnify, defend, and hold harmless Bluesky, its affiliates, and their respective officers, directors, employees, and agents...from and against any and all claims, disputes, demands, liabilities, damages, losses, and expenses—including reasonable legal and accounting fees—arising out of or in any way related to: Your access to or use of Bluesky Social
Bluesky reserves the right to assume the exclusive defense and control of any matter subject to indemnification by you.
Recommendations
- Restrict trigger to actual breach of Terms or violation of law (remove 'access to or use' language)
- Exclude claims caused by Bluesky's own negligence, breach, or security failures
- Allow user control of defense or right to approve settlements
- Add reciprocal company indemnity for IP infringement claims and security failures
- Cap indemnity to user's account value or annual fees (if paid)
- Narrow indemnified-party list to Bluesky itself, excluding affiliates
Modification of Terms
How agreements can be changed
Bluesky reserves the right to modify terms periodically, with notification promised for 'material changes' via app, website, or other channels. However, materiality is not defined, placing burden on users to determine scope of changes. Acceptance occurs via continued use, and no specific effective-date timeline is stated. No mention of version history, archives, or refund rights for material adverse changes. The 60-day informal resolution process in the Dispute Resolution section partially mitigates this, as does the small claims carve-out, but the modification clause itself is weak.
Key findings
- Right to modify reserved without specific limitation
- Notice promised for 'material changes' but materiality undefined
- Acceptance via continued use (passive mechanism, not affirmative consent)
- Multiple notification channels mentioned (app, website, other)
- No specific timeline between notice and effectiveness
- No version archive or changelog provided
- No refund right for material adverse changes
- No separate opt-out mechanism for specific changes (e.g., arbitration clauses)
Evidence from the document
We may update these Terms periodically. We will always post the revised version here and we will notify you through the App, website, or other communication channel if we make any material changes.
It's your responsibility to review the Terms regularly. By continuing to use Bluesky Social after any update, you agree to the revised Terms.
Recommendations
- Define 'material change' with specific examples (dispute resolution, data use, liability caps)
- Provide 30-day advance notice with effective date clearly stated
- Maintain public version history or changelog of all changes
- Allow users to reject material changes and terminate with pro-rated refund (if applicable)
- Exclude dispute-resolution changes from continued-use acceptance (require affirmative consent)
- Allow 30+ day arbitration opt-out window for newly added arbitration clauses
Governing Law & Disputes
Jurisdiction and conflict resolution
Bluesky's dispute clause follows the post-Concepcion arbitration stack with mandatory pre-dispute arbitration and mutual class-action waiver. These restrictions are inherently limiting to consumer remedies. However, significant mitigating factors exist: 60-day informal resolution gatekeeping, arbitration seated in user's county (strong access advantage), preserved small claims court, carve-out for death/injury claims from fraud or gross negligence, public injunctive relief preserved, and regional exception for mandatory local laws (Brazil specifically). The structure acknowledges consumer concerns while maintaining platform protections, resulting in a medium-high-risk assessment.
Key findings
- Mandatory pre-dispute arbitration (AAA or ICDR depending on geography)
- Mutual class-action waiver: claims only in individual capacity
- BUT: 60-day informal resolution required first (meaningful gatekeeping)
- BUT: Arbitration seated in user's county (strong positive for access)
- BUT: Small claims court explicitly preserved
- BUT: Death/injury claims from fraud/gross negligence may go to court at claimant choice
- BUT: Public injunctive relief litigable in civil court
- BUT: Regional exception for mandatory local laws (Brazil, EU, EEA mentioned)
- Fee structure: AAA Rules govern; company pays own fees if claims not frivolous
Evidence from the document
you agree that, subject only to the below carve-out and to the maximum extent permitted by local laws, you will resolve any dispute...through final and binding arbitration by AAA (U.S.) or ICDR (UK/EU), seated in the county (or parish) where you live
YOU AND BLUESKY AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF, CLASS MEMBER, OR REPRESENTATIVE IN ANY PURPORTED CLASS, COLLECTIVE, OR REPRESENTATIVE PROCEEDING.
This clause...does not restrict you from bringing eligible claims in small claims court.
Arbitration does not apply to claims that fraud, criminal misconduct, or gross negligence by Bluesky caused death or personal injury.
If you reside in a jurisdiction that requires the application of its own local laws, courts, or other mandatory procedures...such as Brazil—then those mandatory provisions will apply instead
Recommendations
- Add 30+ day arbitration opt-out window (exercise by email or form)
- Clarify fee allocation: who pays arbitrator fees for small claims
- Extend informal resolution to 90 days for complex disputes
- Carve out reputational harm claims from arbitration (publication/defamation)
- Specify that 'frivolous' determination requires independent arbitrator review
- Add severability clause: if class waiver is void, arbitration remains enforceable
Ex-TerCo provides automated analysis of legal documents for informational purposes. This is not legal advice. Terms can change at any time.