TermsRating
Companies / GitHub / Privacy Policy

GitHub Privacy Policy

1 serious, 5 to watch. Found 11 of 23 practices.
B

Do they sell or share your data?Yes

As defined by applicable law, we “shared” the following categories of personal information in the last 12 months: identifiers/contact information, Internet or other electronic network activity information, and inferences drawn from the above. We shared each category to or with advertising networks, data analytics providers, and social networks. The business or commercial purpose of sharing personal information is to assist us with marketing, advertising, and audience measurement. We do not “sell” or “share” the personal information of known minors under 16 years of age. Shine the Light Act
docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement, lines 435–438
In plain wordsThe company shares your information, such as your contact details and browsing activity, with advertising and social media networks to help with their marketing efforts.

Do they combine your data across products?Partly

Services you linked to your GitHub account: When you or your administrator integrate third-party apps or services with our Services, we receive information based on your settings with those services. This can include details like your name and email from services like Google for authentication. The information we receive depends on the third-party's settings and privacy policies. Always review these to understand what data is shared with our Services. Vendors, Partners, and Affiliates: We may receive information about you from third parties, like vendors, resellers, partners, or affiliates for the purposes outlined in this statement. Processing Purposes: How We Use Your Personal Data
docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement, lines 291–293
In plain wordsThe company collects information about you from various sources, such as linked third-party accounts and business partners, and brings it together. This means they can build a more complete picture of you by combining data from different places.

Do they use your data to target ads?Partly

…s cookies to understand how you use our websites so we can make them better. For example, cookies are used to gather information about the pages you visit and how many clicks you need to accomplish a task. We also use some analytics cookies to provide personalized advertising. Social MediaGitHub and third parties use social media cookies to show you ads and content based on your social media profiles and activity on GitHub’s websites. This ensures that the ads and content you see on our websites and on social media will better reflect your interests. This also enables third parties to develop and improve their products, which they may use on websites that are not owned or operated by GitHub.
docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement, lines 393–394
In plain wordsThe company uses your browsing activity and social media profiles to show you personalized advertisements. This means you may see ads that are specifically tailored to your interests based on how you use their website.

Do they keep your data after you leave?Partly

GitHub uses appropriate administrative, technical, and physical security controls to protect your Personal Data. We’ll retain your Personal Data as long as your account is active and as needed to fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce agreements. The retention duration depends on the purpose of data collection and any legal obligations. Security GitHub uses administrative, technical, and physical security controls where appropriate to protect your Personal Data. Contact Us Contact us via our contact form or by emailing our Data Protection Officer at dpo[at]github[dot]com. Our addresses are: GitHub B.V. Prins Bernhardplein 200, Amsterdam…
docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement, lines 351–365
In plain wordsGitHub may keep your data even after you delete your account to meet legal requirements or resolve disputes. The amount of time they hold onto your information depends on their specific legal and business needs.

Do they track you across sites, apps or places?Partly

Web beacons are electronic images (also called “single-pixel” or “clear GIFs”) that are contained within a website or email. When your browser opens a webpage or email that contains a web beacon, it automatically connects to the web server that hosts the image (typically operated by a third party). This allows that web server to log information about your device and to set and read its own cookies. In the same way, third-party content on our websites (such as embedded videos, plug-ins, or ads) results in your browser connecting to the third-party web server that hosts that content.
docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement, lines 384–384
In plain wordsThis clause means that when you view certain content, third-party companies can track your device and activity. This allows them to follow you and collect information about your browsing habits.

Can they hand your data to authorities without telling you?Partly

Competent Authorities: We may disclose Personal Data to authorized law enforcement, regulators, courts, or other public authorities in response to lawful requests or to protect our rights and safety. Please refer to our Guidelines for Legal Requests of User Data for more information. Corporate Transaction Entities: we might disclose Personal Data within the limits of the law and in accordance with this Privacy Statement for strategic business transactions such as sales or a merger. Partners and Resellers: We cooperate with third-parties that offer sales, consulting, support, and technical services for our Services. We may share your data with these partners and resellers where allowed, and w…
docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement, lines 313–315
In plain wordsThe company can share your information with law enforcement or government agencies if they make a legal request. The clause does not promise to notify you when this happens.

Checked, nothing hostile

giving up the right to sue in court, using your name or photo in ads, passing your data on if the company is sold, using what you do to train AI, locking you in for a year or more.

Not covered by these documents

rights over the things you post or upload, refusing to let you delete your account, reading your private messages, changing the terms without asking you, refusing responsibility when things go wrong, closing your account at any time, keeping rights to your content after you leave, denying responsibility if your data leaks, renewing your subscription automatically, making you pay their legal costs, forcing disputes into their home courts, taking ownership of your ideas and feedback. These usually live in a document we haven’t read yet.