Skip to main content
Back to Home

Privacy Policy

Last updated: March 21, 2026

What We Collect

Taproot does not collect personal data. There are no analytics, no tracking cookies, no advertising pixels, and no user behavior monitoring. We do not store any information about you on our servers.

Authentication

If you sign in with your AT Protocol account, Taproot uses OAuth to establish a session with your PDS. Your session tokens are stored in your browser's local storage only. They are never sent to or stored on Taproot's servers. Signing out or clearing your browser data removes all session information.

How Data Flows

When you use Taproot, your browser makes requests directly to various AT Protocol services to fetch the data you are viewing. In some cases, requests are routed through our server-side proxy when direct browser access is not possible due to CORS restrictions. All connections use HTTPS.

Services Your Browser Connects To

Taproot connects to multiple services across the AT Protocol ecosystem. Each service your browser contacts receives your IP address and standard HTTP headers (browser type, language, etc.) as part of normal web requests:

Vayumandala (our services)

  • pds.directory — PDS directory
  • firehose.directory — relay directory
  • didectory.com, didectory.firehose.stream — DID directory and search
  • labelers.firehose.stream, labels.firehose.stream — labeler relay and label aggregation
  • taproot-contrails.firehose.stream — recent account activity
  • nyc/sfo/london/frankfurt/jet/chennai.firehose.stream — Jetstream instances
  • spacedust.firehose.stream — interaction stream (mirror)
  • slingshot.firehose.stream — identity resolution (mirror)
  • didplc.directory — PLC directory (mirror)

Bluesky PBC

  • public.api.bsky.app — profile search and resolution
  • plc.directory — DID registry
  • cdn.bsky.app, video.cdn.bsky.app — media delivery
  • jetstream*.bsky.network — Jetstream instances
  • relay1.*.bsky.network — collection directory queries

Microcosm

  • constellation.microcosm.blue — backlink index
  • spacedust.microcosm.blue — interaction stream
  • slingshot.microcosm.blue — identity resolution
  • lightrail.microcosm.blue — collection directory

Other services

  • Cloudflare Pages — hosting and content delivery ( Cloudflare Privacy Policy)
  • cloudflare-dns.com — DNS-over-HTTPS for handle resolution
  • lexicon.store — lexicon schema registry

AT Protocol PDS instances

Your browser connects directly to individual Personal Data Servers to fetch records, profiles, and blobs. These are operated by many different organizations and individuals across the AT Protocol network.

Local Storage

Taproot stores your preferences (theme, display settings, service endpoints) in your browser's local storage. This data never leaves your browser and can be cleared at any time through your browser settings or the Reset option in Taproot's settings.

Children

Taproot does not knowingly collect information from children under 13.

Changes

We may update this policy. Changes will be posted here with an updated date.

Contact

Questions? Reach us at @atproto.at on Bluesky.