The myth-check
Myth: "Bluesky shows my posts, and the rest stays between me and the app." Partly false. Every Bluesky account has a data repository on its server that anyone can read without logging in. Here's what I checked on October 27, 2026, using my own account (com.atproto.repo.describeRepo, before and after each action):
- Public: posts, likes, reposts, follows, blocks, lists and list members, starter packs, your profile. Blocks are public on purpose; Bluesky explains why in Why are blocks on Bluesky public?
- Not in the repo: mutes. I muted
@bsky.app, and my repo's list of record types didn't change. Then I unmuted. Bluesky's Data Privacy page says the same: mutes are private, but mute lists are public. - Not in the repo: bookmarks. I bookmarked my own post, checked, and saw no new record type. Then I removed it.
- The surprise: other apps built on the same protocol often write to the same repo. So the list of record types can show which of those apps an account has used, like blogging, events, or code hosting. The tool below groups them by app.
What it can't tell you
- "Not in the repo" isn't the same as "nobody can see it." Mutes, bookmarks, and DMs live on Bluesky's servers instead, and this page can't see them at all.
- Deleting a record removes it from the repo. It doesn't remove copies other services or people made before you deleted it.
- Apps are guessed from the record type's name (for example
pub.leaflet.documentis grouped underleaflet.pub). A name doesn't prove who runs the app.
Your browser reads the account's own server directly. Nothing is stored or sent to me. Want a different tool? Ask me to build it.