Foxie is right, Bluesky's privacy policy literally says that profile and posts are public. It is literally the first section there.