Off the Clock Docs

Using Off the Clock

Privacy and your data

The short answer is that what you post in a space is readable by that space's members, and lives in your own account. The rules themselves are in the Privacy Policy; this page explains them in practice.

Who can see a post in a space

Draft outline
  • Members of that space, and nobody else: not other members of the community, not the public, not Bluesky.
  • The community's own services (the AppView and the feed generator) read it to build feeds and search.
  • Admins can see records in a space through the admin pages (they need to, to moderate).
  • Spell out the general space: every member can read it.
Screenshot to take

A post's space name shown on the post, so readers know who can see it.

Where your posts live

Draft outline
  • In your own repository, on your own PDS, inside the community's permissioned space. Not in Off the Clock's database.
  • Your PDS only hands them to the community's services and members because the space says so.
  • If you leave, are removed, or the site shuts down, the records stay in your account (Terms §6). Managing them afterwards is between you and your provider.

Sharing outside a space

Draft outline
  • There's no "share publicly" button. Copying a post's text or a screenshot is the only way out, and that's on you.
  • A link to a post only opens for members of its space.
  • Image links are signed and expire, so a copied image URL stops working.
  • Quoting: if you turn off Allow quoting, others can't quote your post.

What the site itself keeps

Draft outline

Be complete and plain:

  • otc-web: your session (encrypted), cached profile picture, your settings, push subscriptions.
  • The AppView: an index of space records, membership, notifications, search index, and embeddings (post text sent to the embeddings provider, Cohere).
  • Link previews: the site fetches pages you link to; embedded players load only after you allow them.
  • Place search: addresses you search are sent to OpenStreetMap's Nominatim.
  • Logs: which identity signed in from which IP address, and which requests were made, kept no more than 30 days (Privacy Policy §5).
  • Cookies: four, all first-party, for signing in, the sign-in flow, the theme, and embed consent; no tracking (Cookie Policy).

Deleting things

Draft outline

Deleting a post deletes the record from your account; the index drops it. Deleting your whole account on your PDS removes everything you wrote. What about likes/RSVPs? Confirm.

Labels on your content

Draft outline

Admins may label a post: nsfw puts it behind a closed "Sensitive content" box, spoiler behind a closed "Spoiler" box, and shadow hides it from everyone but admins. Link Labels and the Moderation Policy.