X vs Bluesky

Posting gives X a worldwide, royalty-free license to use, copy, modify, publish, distribute, and display your content in any media. This is much broader than what is strictly needed just to host your posts.

X expressly says it can analyze your content and use it to improve services, including training machine learning and AI models. Users who post may therefore help train AI systems without additional payment.

X collects the contents of Direct Messages, along with recipients, timestamps, and metadata for encrypted messages. Users should not assume ordinary messaging on the service is private from the platform.

X can let other companies, organizations, or individuals use or redistribute your content, including syndication, broadcast, and publication on other media and services. That expands downstream use beyond the platform itself.

X states you will not be paid for its use of your content or for others' licensed uses. The terms treat your ability to use the service as sufficient compensation.

X says it may collect log information even if you do not have an account or are signed out, including pages visited, search terms, ads shown, and cookie identifiers. That means tracking can extend beyond active account use.

X may associate your account with browsers, devices, email addresses, phone numbers, and signed-out identifiers to infer identity. This can make it harder to stay compartmentalized across devices or sessions.

X collects information about your interactions with ads served on X and off X, including views, clicks, and video engagement. This supports ad profiling based on behavior across contexts.

X automatically collects approximate location and can collect precise location if you enable it. Location data can be sensitive, especially when combined with activity and ad profiles.

X says you still own the content you create and post. That is better than an ownership transfer, though it is paired with a very broad license back to X.

If you use features that limit distribution to a restricted community, X says it will respect that choice. This is a useful transparency point, though it does not undo the broad underlying license.

Direct messages are not end-to-end encrypted and may be accessed for trust and safety purposes. Users should not treat Bluesky DMs as highly confidential communications.

Posts, profile, likes, follows, and blocks are public by design. This makes social graph and activity data broadly visible rather than private by default.

Even if you delete your account, copies of your content may remain on other services using the AT Protocol. In practice, deletion across the decentralized network may not be fully enforceable.

Most disputes must go through a 60-day informal process and then binding individual arbitration instead of court. This usually makes it harder to bring claims publicly or use normal court procedures.

Users generally cannot participate in class or representative actions against Bluesky. That reduces leverage for small-value claims that are impractical to pursue individually.

Bluesky says it does not sell or share personal data for targeted advertising. That's a meaningful privacy-positive commitment compared with many social platforms.

Depending on location, users can request access, correction, deletion, portability, restriction, objection, and review of automated decisions. These are substantial privacy rights, especially for users in stronger-regulation jurisdictions.

You keep ownership of what you post, but grant Bluesky a worldwide, royalty-free license to reproduce, adapt, distribute, display, moderate, and promote that content. This is broad enough to cover product use and marketing uses.

Bluesky keeps data while your account is active and may retain it longer for trust and safety, disputes, audits, legal compliance, and claims. The policy does not give firm deletion deadlines for many categories.

If something goes wrong, Bluesky's financial liability is generally limited to US$100, except in narrow cases like fraud, gross negligence causing death or personal injury, or non-waivable statutory rights.

The terms explicitly say you can delete your account at any time in settings. A built-in deletion flow is more user-friendly than requiring manual support requests.

If your account is suspended or restricted, you can appeal using an in-app tool or email within two weeks. EU/EEA users also retain access to out-of-court review and local courts.