Privacy Policy

Last updated: June 24, 2026

This policy describes the data processed by the SkateAT app and how it is used. SkateAT is built on the AT Protocol — the open protocol that powers Bluesky: most of your content lives in your own repo (PDS), not in a central database owned by SkateAT.

Identity and sign-in

Sign-in uses your Bluesky / AT Protocol identifier (handle) and a dedicated, revocable app password — never your main password. This app password, along with your session, is stored encrypted on your device. Your AT Protocol identifier (DID) is used to link your activity in the app to your account.

Content you create

Spots, sessions, tricks, vouches, spot conditions, photos and videos are stored in your PDS repo (Bluesky's by default, or any other AT Protocol PDS of your choice), just like your Bluesky posts. This content is therefore public by nature, like the rest of your AT Protocol activity. SkateAT does not "own" this data: if you delete it from the app (or any other AT Protocol client), it disappears from your repo.

Location

With your permission, the app uses your device's location to center the map and show nearby spots. This location is processed only on your device and is never sent to our servers.

Camera

With your permission, the app uses the camera to scan QR codes (adding riders). The video stream is processed entirely on your device and is never stored or transmitted to our servers.

Community index (backend)

To avoid querying the repo of every person you follow individually on every screen, SkateAT runs a small service that maintains an index — a rebuildable copy — of the spots, tricks, sessions and conditions published by you and the accounts you follow, sourced from the public AT Protocol "firehose". This index only contains data that is already public on the relevant PDSes: it can be rebuilt or deleted without any loss to you.

Push notifications

If you allow notifications, a notification identifier (Expo / Firebase Cloud Messaging token) is linked to your account on our server, in order to send you alerts (new spot from someone you follow, session started, etc.) according to your preferences — adjustable per event type and per followed person. This token is only used by SkateAT to send notifications.

What we don't do

• No advertising or ad tracking
• No selling data to third parties
• No profiling for commercial purposes

Third-party services involved

• Your AT Protocol PDS (Bluesky by default, or another of your choice) — governed by its own privacy policy.
• Expo Push / Firebase Cloud Messaging (Google) — for delivering push notifications.
• Sentry — for crash reporting and error monitoring. Reports contain stack traces, device info, and app version; no personal identifier is attached. Only 10% of sessions are sampled. Sentry Privacy Policy.
• Fly.io — hosting for the community index and notification service.

Retention and deletion

Your skate content (spots, sessions, tricks, media…) remains under your control: you can edit or delete it from the app, which removes it from your PDS repo and, at the next sync, from the backend index. To request deletion of your notification token or preferences stored on our server, email us at the address below.

Your rights

Depending on your jurisdiction (notably the GDPR for EU residents), you have the right to access, correct and delete your data. For your skate content, these rights are exercised directly via your PDS (your Bluesky account or equivalent). For data held by SkateAT's backend (notification token, preferences), contact us.

Minimum age

SkateAT is not intended for children under 13, nor below the minimum age required by your PDS (e.g. Bluesky) to create an account.

Changes

This policy may change; the date of the last update is shown at the top of this page.

Contact

For any questions about this policy or your data: skate-at@mutenroshi.fr