Using Off the Clock
Privacy and your data
The short answer is that what you post in a space is readable by that space's members, and lives in your own account. The rules themselves are in the Privacy Policy; this page explains them in practice.
Who can see a post in a space
Draft outline
- Members of that space, and nobody else: not other members of the community, not the public, not Bluesky.
- The community's own services (the AppView and the feed generator) read it to build feeds and search.
- Admins can see records in a space through the admin pages (they need to, to moderate).
- Spell out the general space: every member can read it.
Screenshot to take
A post's space name shown on the post, so readers know who can see it.
Where your posts live
Draft outline
- In your own repository, on your own PDS, inside the community's permissioned space. Not in Off the Clock's database.
- Your PDS only hands them to the community's services and members because the space says so.
- If you leave, are removed, or the site shuts down, the records stay in your account (Terms §6). Managing them afterwards is between you and your provider.
Sharing outside a space
Draft outline
- There's no "share publicly" button. Copying a post's text or a screenshot is the only way out, and that's on you.
- A link to a post only opens for members of its space.
- Image links are signed and expire, so a copied image URL stops working.
- Quoting: if you turn off Allow quoting, others can't quote your post.
What the site itself keeps
Draft outline
Be complete and plain:
- otc-web: your session (encrypted), cached profile picture, your settings, push subscriptions.
- The AppView: an index of space records, membership, notifications, search index, and embeddings (post text sent to the embeddings provider, Cohere).
- Link previews: the site fetches pages you link to; embedded players load only after you allow them.
- Place search: addresses you search are sent to OpenStreetMap's Nominatim.
- Logs: which identity signed in from which IP address, and which requests were made, kept no more than 30 days (Privacy Policy §5).
- Cookies: four, all first-party, for signing in, the sign-in flow, the theme, and embed consent; no tracking (Cookie Policy).
Deleting things
Draft outline
Deleting a post deletes the record from your account; the index drops it. Deleting your whole account on your PDS removes everything you wrote. What about likes/RSVPs? Confirm.
Labels on your content
Draft outline
Admins may label a post: nsfw puts it behind a closed "Sensitive content" box, spoiler behind a closed "Spoiler" box, and shadow hides it from everyone but admins. Link Labels and the Moderation Policy.