Privacy Policy

Corgi is a community-governed Bluesky feed. This Privacy Policy explains what data we collect, how we use it, and your rights. We collect the minimum necessary to operate the feed and respect community governance.

Corgi connects via Bluesky app passwords. We never receive your main Bluesky password, and you can revoke access at any time from your Bluesky settings.

Depending on whether you register interest, sign in or participate in governance, we collect:

• Your Bluesky DID and handle — used to identify your account and associate your vote.
• Vote preferences — weight sliders, keyword preferences, topic preferences. These are stored per governance round and used solely to calculate aggregated community weights.
• Research consent status — whether you have opted in, opted out, or not yet decided. Stored with a timestamp and version number.
• Session information — a server-side session used to authenticate your requests. Expires when you sign out or revoke your app password.
• Contact interest — your email, optional Bluesky handle, selected interests, optional note and contact permission are stored separately from voting applications. We use them to follow up about your selected interests, not as research participation or voting approval. Contact hello@corgi.network to request deletion.
• Waitlist submissions — the Bluesky handle and optional note you provide when requesting pilot voting access. The request is retained after it is approved or rejected as part of the governance record; contact us to request its deletion.

To generate the feed, Corgi processes public Bluesky posts and engagement records, including likes and follows. Signing in uses a Bluesky app password, not your main Bluesky password.

• Feed governance — your votes are aggregated (never exposed individually) to set feed ranking weights for each round.
• Audit trail — Operator actions are recorded in an audit log. Public access to the audit log is currently paused.
• Research (opt-in only) — if you have consented, anonymised interaction data may be shared with academic research partners studying community-governed recommendation systems.

We do not sell, rent, or share your personal data with third parties for advertising or commercial purposes.

The public feed provides ranking information where available. Some governance pages and APIs are currently paused.

• The weights associated with the published feed, where available.
• Per-post score breakdowns for posts that are publicly viewable and have a published receipt.

Your individual vote is never public. Aggregate statistics (e.g. total vote count, participation rate) may be surfaced on the dashboard, but cannot be traced back to you.

Governance votes are retained per round and archived when a round closes. We retain historical round data indefinitely to support the audit trail. You may request deletion of your participation data by contacting us.

Contact-interest records do not expire automatically. We retain them unless you request deletion. You can also ask us to stop contacting you about your selected interests.

Deleted records may remain in restricted backups until those backups are replaced. If a backup is restored, deletion and contact-withdrawal requests must be reapplied before any contact follow-up.

Session data is deleted on sign-out or app password revocation.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your contact-interest record, participation data and waitlist submission.
• Withdraw permission for contact-interest emails at any time by contacting us.
• Withdraw research consent at any time (this does not affect your ability to vote).
• Object to or restrict certain processing.

To exercise any of these rights, email hello@corgi.network.

Research participation is entirely optional and independent of feed governance. If you consent:

• Anonymised interaction data (not your DID or handle) may be shared with academic research partners.
• Your consent is versioned and timestamped. You can view your current consent status in your account settings.
• You can withdraw consent at any time by emailing hello@corgi.network or through the in-product consent screen.

We use industry-standard practices to protect your data, including encrypted sessions and parameterised database queries. We do not store your Bluesky app password — only a server-side session token, which is revocable at any time.

If you discover a security issue, please disclose it responsibly to hello@corgi.network.

We may update this Privacy Policy. Material changes will be announced on the dashboard. The “Last updated” date at the top reflects the most recent version.

Continued use of the Service after a policy update constitutes acceptance of the revised policy. If we make a material change to how we handle research data, we will re-request your consent.