Blueglass for Bluesky ("Blueglass") is a hobby project that shows your Bluesky feeds on Even Realities G2 glasses. It is run by one person, Adam W., who is the data controller for the information described here. Contact: hello@blueglass.page.
Blueglass is not affiliated with, endorsed by or sponsored by Bluesky Social, PBC or Even Realities.
What is stored
When you use Blueglass, our server stores:
A hash of a random device token. The token itself stays on your phone. It identifies your phone to Blueglass; it is not a password.
For each Bluesky account you add: your account identifier (DID), handle, display name and avatar address.
Your Bluesky login session, encrypted. It lets Blueglass read your feeds on your behalf.
Your chosen default feed.
When the device was created and last used.
What is not stored
No passwords. You sign in with Bluesky's own sign-in page (OAuth). Blueglass never sees your password.
No posts, replies, messages or feed content. Posts are fetched when you read them, shown, and not kept.
No advertising or tracking identifiers. No tracking or analytics cookies are used. Signing in sets one short-lived security cookie (`sg_nonce`, valid for at most 10 minutes, limited to the sign-in pages) that makes sure sign-in finishes in the same browser that started it; it is deleted when sign-in finishes. Nothing else sets cookies.
What Blueglass can do with your account
When you sign in, Bluesky asks you to approve a deliberately small set of permissions. In plain words, Blueglass can:
read your feeds, threads, profiles and preferences;
like and unlike posts;
block accounts;
add accounts to your own moderation lists;
mute and unmute accounts;
send a report about a post or account to Bluesky's moderation service.
Blueglass cannot post, reply, follow, change your profile, or read your direct messages.
How long data is kept
A device that has not been used for 90 days is cleaned up automatically: its Bluesky sessions are revoked and everything stored about it is deleted.
Short-lived sign-in records expire within minutes and are removed by the daily cleanup.
The server keeps minimal operational logs and never logs device tokens or Bluesky sessions.
Deleting your data
"Remove account" revokes that account's session with Bluesky and deletes it from Blueglass.
"Remove this device" (delete all my data) revokes every session on the device and deletes the device and all its accounts.
You can also revoke Blueglass at any time from Bluesky's own settings.
Content you may see
Blueglass always hides adult content, even if you have enabled it in Bluesky, in compliance with Even Realities' Even Hub developer policies. Other filtering follows your own Bluesky moderation settings. To report a post, use Report in the app, or contact hello@blueglass.page.
Who processes your data
Blueglass runs on Cloudflare (Workers and D1), which processes data on our behalf, and talks to Bluesky's services to fetch and act on your content. Blueglass does not sell or share your data with anyone else.
Your rights and contact
To ask what is held about you, or to have it deleted, use the delete options above or email hello@blueglass.page. Changes to this policy will be posted on this page.