Companies/productivity
GitHub
Current privacy policylast checked 8/15/2026healthy
What GitHub takes from you. Straight from the captured policy. Tap any row for the exact quote.
Account activityHow and when you use your account.Collected
“Manage and administer your GitHub account, including adjusting privacy settings.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Browsing activityPages you visit and things you tap or click.Collected
“Website Usage Data: We automatically log data about your Website interactions, including the referring site, date and time of visit, pages viewed, and links clicked.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Device identifiersSerial numbers and IDs that mark your phone or laptop.Collected
“A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Email addressThe email you sign up or log in with.Collected
“Account Data: We collect certain information when you open an account such as your GitHub handle, name, email address, password, payment information and transaction information.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Inferred profileGuesses about you — interests, habits, demographics.Collected
“Profile Information: We collect information to create a user profile, which may include a photo, additional email addresses, job title, or biography.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
IP addressYour network address, which can reveal rough location.Collected
“Our emails to users may contain a pixel tag, which is a small, clear image that can tell us whether or not you have opened an email and what your IP address is.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
LocationWhere you are or where you've been.Collected
“For instance, we infer your general geographic location based on your IP address.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Your messagesContents of messages, chats, or emails on the service.Collected
“Support Data: When you seek customer support, we collect details like code, text, or multimedia files.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Your nameYour legal or profile name.Collected
“Account Data: We collect certain information when you open an account such as your GitHub handle, name, email address, password, payment information and transaction information.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Other dataAdditional data described in the policy.Collected
“Access and utilize your Personal Data, which includes details on how you use the Services, as well as your content and files.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Payment detailsCards, billing info, or transaction data.Collected
“Account Data: We collect certain information when you open an account such as your GitHub handle, name, email address, password, payment information and transaction information.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Photos & videosImages and videos you upload or store.Collected
“Profile Information: We collect information to create a user profile, which may include a photo, additional email addresses, job title, or biography.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Purchase historyWhat you buy and when.Collected
“Cookies also track which ads you click or purchases you make after clicking an ad”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
What the policy denies or leaves unclear.
Children's dataData about kids under 13 (or local age limits).Says no
“Our Services are not intended for individuals under the age of 13. We do not intentionally gather Personal Data from such individuals.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Why they use your data.
AdvertisingTargeting or measuring ads.Yes
“serve and measure the effectiveness of targeted advertising and other marketing efforts”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
AI trainingUsing your data to train AI models.Yes
“product development and improvement (including training and improving artificial intelligence and machine learning technologies)”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
AnalyticsMeasuring how people use the service.Yes
“(iv) compile statistical reports, and (v) provide information and insight for future development of GitHub”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Legal reasonsComplying with laws and legal requests.Yes
“Complying with and resolving legal obligations: including responding to Data Subject Requests for Personal Data processed by GitHub as Controller (for example website data), tax requirements, agreements and disputes.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
PersonalizationTailoring content and recommendations to you.Yes
“For Enterprise Marketing Pages, we may also use non-essential cookies to (i) gather information about enterprise users’ interests and online activities to personalize their experiences”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Running the productMaking the service itself work.Yes
“Product Development and Improvement: We use Personal Data to develop and improve our products, services, and technologies, including artificial intelligence and machine learning technologies.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
ResearchStudies and product research.Yes
“improving products and supporting research”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
SecurityPreventing fraud and protecting accounts.Yes
“We process data for purposes that are in our legitimate interests, such as securing our Services”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Sharing, retention & your controls.
You can get a copyYou can request the data they hold on you.Good sign
“The right to access the data collected about you”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
You can delete your dataThe policy offers a way to erase your data.Good sign
“The right to erase or limit the processing of your Personal Data under specific conditions”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Retention period disclosedThe policy says how long data is kept.Disclosed
“We’ll retain your Personal Data as long as your account is active and as needed to fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce agreements.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
No controls disclosedThe captured policy doesn't disclose user controls.Good sign
“When a school or employer supplies your GitHub account, they assume the role of Data Controller for most Personal Data used in our Services.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
No sharing disclosedThe captured policy doesn't disclose sharing.Disclosed
“You control what information is made public.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
You can opt outYou can say no to some uses of your data.Good sign
“To opt out, go to File > Preferences > Settings in the top left menu of VS Code. Opting out will sync this preference across all future web sessions in GitHub Codespaces and github.dev.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Shares with third partiesData goes to other companies.Disclosed
“When you use third-party extensions, integrations, or follow references and links within our Services, the privacy policies of these third parties apply to any Personal Data you provide or consent to share with them.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
Sells dataThe policy discusses selling personal data.Says no
“If GitHub detects the GPC signal from your device, GitHub will not share your data (we do not sell your data).”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1
What changed.
No published changes yet.
Full evidence record (33 published claims)
purpose · product
We found: disclosed
“Product Development and Improvement: We use Personal Data to develop and improve our products, services, and technologies, including artificial intelligence and machine learning technologies.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 1c2714a9a8b0748fc8a5a9d2b631b6904477075099496dc4e1dc4dfcb0324648
data collected · account activity
We found: disclosed
“Manage and administer your GitHub account, including adjusting privacy settings.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 9a8ee4eb7a28b3b9273314cbfc4f453306e680bfd6165f4ad8fbf86cd75b85b0
purpose · advertising
We found: disclosed
“serve and measure the effectiveness of targeted advertising and other marketing efforts”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 44f13f7d48696b9865b572d38535cb59d3dc15e185e102d717e624f4c45c8c62
control · access
We found: disclosed
“The right to access the data collected about you”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 2294bc3533f47335c200fe5729f22645b83af46d007586d4682d8404f56120cb
region · US
We found: disclosed
“GitHub also complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 87d668a90806d3a21a0b090d3d06074eec0c0d07eb2e9c3e5fcaa1b30c1c1cb7
data collected · messages
We found: disclosed
“Support Data: When you seek customer support, we collect details like code, text, or multimedia files.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 4e4733291f57a38658312939ff030dc0aca02160b757f44cfd9560b2ad245499
control · none disclosed
We found: disclosed
“When a school or employer supplies your GitHub account, they assume the role of Data Controller for most Personal Data used in our Services.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 32c5a4c68fe89e541d37bcc7ead36065d620ea6f96db22cf669b2d619e80d3bf
region · other
We found: disclosed
“GitHub has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim ca4b13aab2ef34af6fcee7eac88a3354faa32181e9c034e385b24e565b6c11b0
data collected · email
We found: disclosed
“Account Data: We collect certain information when you open an account such as your GitHub handle, name, email address, password, payment information and transaction information.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 74601aecaf1c6a571b4e4cda03bdec7d7158f709f904d383a5e43c405a26277f
data collected · browsing
We found: disclosed
“Website Usage Data: We automatically log data about your Website interactions, including the referring site, date and time of visit, pages viewed, and links clicked.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim c74236b9b2c2a1f5ea029bb332ddd080c4bec7999da260daf970495c278c59cc
sensitive · children
We found: not disclosed
“Our Services are not intended for individuals under the age of 13. We do not intentionally gather Personal Data from such individuals.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 9e8d6697aebffffde1dd18b3526cd82b4191edfa1cc963f43b15a322e3ab7799
sharing · sale
We found: not disclosed
“If GitHub detects the GPC signal from your device, GitHub will not share your data (we do not sell your data).”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 36caa6391c6d18239de3714c1df35323f0bbdf852d5420e561f3962a6659f631
control · deletion
We found: disclosed
“The right to erase or limit the processing of your Personal Data under specific conditions”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 184c87df51435b71e22d0d01bc905b182e11fdbcdf50990e9983e5fbcd804f8e
retention · duration disclosed
We found: disclosed
“We’ll retain your Personal Data as long as your account is active and as needed to fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce agreements.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim df632231f5eca62922f8666fd0506948c4f1b4bf0c9bcdf44d7a584bab884df0
purpose · personalization
We found: disclosed
“For Enterprise Marketing Pages, we may also use non-essential cookies to (i) gather information about enterprise users’ interests and online activities to personalize their experiences”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim d88ec66be08423c74b484401a52b48da11ebcf0965f21cf13bc8339f16a35473
control · opt out
We found: disclosed
“To opt out, go to File > Preferences > Settings in the top left menu of VS Code. Opting out will sync this preference across all future web sessions in GitHub Codespaces and github.dev.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim f4178da6da9dffb8d12d708a90f97bf294acfc151d0ad3912ce4c925bed79d1b
sharing · third party
We found: disclosed
“When you use third-party extensions, integrations, or follow references and links within our Services, the privacy policies of these third parties apply to any Personal Data you provide or consent to share with them.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim d9c003e87f9db4a95dba283d3e562e89ea3157f53c1ac938529ba0eafa0333db
purpose · analytics
We found: disclosed
“(iv) compile statistical reports, and (v) provide information and insight for future development of GitHub”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 1da3a6834e746d1a7adf6ee911e48cce975242562c1407994df6fd62e19f2fd2
data collected · name
We found: disclosed
“Account Data: We collect certain information when you open an account such as your GitHub handle, name, email address, password, payment information and transaction information.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 9d8cd165793abe3e414e75e43bce47bb86fb312e3368c25344a89b0e5a72fd9c
data collected · ip address
We found: disclosed
“Our emails to users may contain a pixel tag, which is a small, clear image that can tell us whether or not you have opened an email and what your IP address is.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 639b2fb61f07d3e0137e9db097767dc955816ed3e591c90215e738ec1ff0a074
sharing · none disclosed
We found: disclosed
“You control what information is made public.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim c851ea0ce2c8973fab6c5e03f35a0c17ba5519ba4909860ba4946a2af0cf2a1f
purpose · research
We found: disclosed
“improving products and supporting research”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 83f0d69b45a08f61f707632721eae02512363de32b8e14f16159d76045884fd3
purpose · ai training
We found: disclosed
“product development and improvement (including training and improving artificial intelligence and machine learning technologies)”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 52895b747392a732274e94325af9115564c85277d38fb9c8cd15db39f45220d9
data collected · purchase
We found: disclosed
“Cookies also track which ads you click or purchases you make after clicking an ad”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 98349459d9281633cd073ebae6656ab727871f015ba5695661dae6747f234e69
data collected · payment
We found: disclosed
“Account Data: We collect certain information when you open an account such as your GitHub handle, name, email address, password, payment information and transaction information.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim d45dc5a4eaaf8b7950753950d45db7c5c291576d78de490853dae614931c5876
data collected · photos
We found: disclosed
“Profile Information: We collect information to create a user profile, which may include a photo, additional email addresses, job title, or biography.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 47baa4000b618eece6dddfe7c0c8d01db12c424ffb569711b8a517374c81d14e
region · EU
We found: disclosed
“GitHub has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 1b6ae48491d25588e652a4dff2fc01b0ac3397778b3ba72f0e78791ca1540b54
data collected · other
We found: disclosed
“Access and utilize your Personal Data, which includes details on how you use the Services, as well as your content and files.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 1298d1488598ba17b7e72eafb533cf45e569aadcc2cb3e76aebcc6b59356b443
purpose · security
We found: disclosed
“We process data for purposes that are in our legitimate interests, such as securing our Services”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim d64684e475bf5d9c93283b56d92e7d552072a24376b60ee0154b8cb1ffd416bc
data collected · inferred profile
We found: disclosed
“Profile Information: We collect information to create a user profile, which may include a photo, additional email addresses, job title, or biography.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 5744169199194814517b5c32c8fdad80e111eb7da31d36f64942942e7b23e6bc
data collected · device id
We found: disclosed
“A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim af1e9e8e1aff55e16d4ff9bfa4c614a53f8a127c384f650656f1a872ae2a855b
data collected · location
We found: disclosed
“For instance, we infer your general geographic location based on your IP address.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim 2cf3ff1e442e78b54d89b061101405c1ddfcdbd159113394b4dd8a088c28534a
purpose · legal
We found: disclosed
“Complying with and resolving legal obligations: including responding to Data Subject Requests for Personal Data processed by GitHub as Controller (for example website data), tax requirements, agreements and disputes.”
snapshot d1c504be-1425-4c36-86db-df13dc0153d1 · revision 1 · source region global Evidence details
claim e3cb79fc47b27d27e3064aa13d37930d28aa422a631980d8eaf69ee406c7a408
Ask about this policy
The cited assistant is off. Read the published disclosures above. This is not legal advice.