Choose your X (Twitter) archive zip. Your browser extracts only tweets and tweet media; DMs, ads and everything else stay on your computer.
Log in to Bluesky with an app password (not your main password). It is used for this request only and is not stored.