Effective 14 October 2026. Applies to the BlueSky web application at www.blue-sky.app.
BlueSky is a private, internal lead-management and leasing application operated by Bluecore Residential. It is not a consumer product and is not open to public sign-up. Every BlueSky account is created by a BlueSky administrator.
This policy explains what personal information BlueSky collects about the people who use it — Bluecore Residential staff, and anyone else an administrator has given an account — why, and what we do with it.
BlueSky is also used to manage enquiries from prospective and current residents. Information about those people is processed on Bluecore Residential's behalf and is not described by this policy; questions about it should be directed to Bluecore Residential.
BlueSky offers “Sign in with Google” as its main way to sign in. Using it is not required: signing in with an email address and password remains available.
We request two standard, non-sensitive permissions: your email address and your
basic profile (email and profile). We do not request
access to Gmail, Drive, Calendar, Contacts, photos, or any other Google service, and we cannot
read them. We ask Google for access only while you are signing in, not for ongoing access.
When you sign in, Google sends BlueSky a small profile record. We keep only part of it:
| Sent by Google | Do we store it? | What it is used for |
|---|---|---|
| Email address | Yes | Matching you to your existing BlueSky account. |
| Whether that email address is verified | No — checked, not stored | We refuse the sign-in unless Google confirms the address is verified. |
| Google account identifier | Yes | Tying your BlueSky account to one specific Google account, so a different Google account cannot later claim your email address. |
| First and last name | Yes | Keeping the name shown in BlueSky current. |
| Profile picture | No | Not used. Profile pictures in BlueSky are uploaded separately. |
| Language and organisation details | No | Not used. |
Because Google has verified that you control your email address, a successful Google sign-in also completes your account's email confirmation if it was still pending, and lifts a temporary lock caused by repeated incorrect passwords.
We do not store Google access tokens or refresh tokens. They are used once, during sign-in, and then discarded. BlueSky therefore has no standing access to your Google account and cannot read anything from it between sign-ins.
BlueSky's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Signing in with Google never creates an account. If the Google address you use does not already match a BlueSky account, you are refused and told to contact an administrator. Google sign-in is a way to open a door you already have a key to — it is not a way in.
To remove the link between your BlueSky account and your Google account, ask a BlueSky administrator to unlink it. The stored Google account identifier, the Google email address, and our record of the name Google last sent are deleted at that point; the name shown on your BlueSky profile stays as it is. You can also revoke BlueSky's access from your Google account directly at myaccount.google.com/permissions.
Whether or not you use Google sign-in, BlueSky stores:
BlueSky uses these cookies and browser storage:
_ga and _ga_…), set
by Google Analytics on BlueSky's pages, including the sign-in page, to count visits and
understand how the application is used. They last up to two years unless you clear them.
The first three are set by BlueSky itself and exist only to keep you signed in. There are no advertising cookies.
BlueSky's pages load Google Analytics, which receives the pages you view, your browser and device details, your IP address (from which Google derives an approximate location), and the name of the property you have selected in BlueSky. They also load an application-monitoring script that reports page performance and errors, web fonts from Google's font service, and a browser-compatibility notice from browser-update.org; each of these receives your IP address and browser details when your browser fetches it. This privacy page loads none of them.
We do not use this information for advertising, we do not sell it, and we do not use it to build profiles for any purpose beyond operating BlueSky.
Other BlueSky users at Bluecore Residential can see your name, contact details, role and property assignments, and your work in the application, subject to their own permissions.
Beyond that, we share personal information only with the service providers that run BlueSky on our behalf, and only to the extent needed to run it: our cloud hosting provider and its database, caching and log-management services; our file-storage provider (for uploaded profile pictures); the services that deliver BlueSky's email and text messages, including messages you send to prospects through BlueSky; our application-monitoring and error-alerting services, including the workplace messaging service that error alerts are posted to; and Google, for sign-in, analytics and web fonts. We do not sell personal information or disclose it for anyone else's marketing. We may also disclose information where the law requires it.
We keep your account and its associated records for as long as your account exists. When someone leaves, their account is normally deactivated rather than deleted, so that historical records stay attributable and reports remain accurate. Google Analytics keeps the data it collects for the retention period set in our Google Analytics account. To request deletion, use the contact below.
BlueSky is served over HTTPS and requires an account to access. Passwords are stored only as salted hashes, and an account is temporarily locked after repeated incorrect passwords. Access is limited by role and by property assignment, and administrators can deactivate an account immediately.
If we change what we collect or how we use it, we will update this page and the date at the top of it.
BlueSky is operated by Bluecore Residential.
Because every account is created by an administrator, questions about this policy or about your information are best raised with your BlueSky administrator, who can also unlink your Google account or deactivate your access on request.