Privacy Policy

Updated August 30, 2026

Deck³ is published by Rafacst Consultoria LTDA. This policy covers the Deck³ apps for macOS and Windows and this website.

Bluesky accounts and content

Deck³ connects directly to Bluesky and to the Personal Data Server selected by your account. These services process your profile, posts, messages, media, preferences, and moderation data under their own policies.

Rafacst does not receive your Bluesky password, app password, OAuth token, or session token. The app protects saved sessions with the macOS Keychain or Windows Data Protection API. Content is sent to the services you choose; Rafacst does not host a separate copy.

Anonymous usage data

Deck³ can send limited product events to a self-hosted Aptabase instance atdata.rafacst.me. Railway hosts that instance in the United States. Aptabase provides the open-source software and does not receive the events as a hosted service.

Events describe fixed app actions, such as an app start, a focused column, an opened screen, a column error, or an account-setup result. They can also include the app version, system version, locale, layout choices, and counts.

Events do not include post or message text, handles, email addresses, DIDs, credentials, session tokens, server addresses, searches, URLs, drafts, contacts, locations, or advertising identifiers. Deck³ does not use this data for advertising or cross-app tracking and does not sell it.

You can turn usage data off in the app's privacy settings. The app stops new events after you turn it off.

Support and website

If you email support, Rafacst receives the address and information that you choose to send. Cloudflare delivers this website and processes ordinary request data needed for security and delivery.

Your choices and rights

You can disable usage data, sign out, remove local app data, or manage Bluesky content through your account. For a privacy request, email[email protected].