If you like this, see what else we're creating.

Developer tools

GitHub

github.com

C
Open the original (new tab)GitHub General Privacy Statement
C

Risk score

34of 100

Read Oct 6, 2026

In short

  • GitHub collects your personal data, including code and usage details, to provide its services.
  • It shares this information with partners like Microsoft and third-party apps for marketing and analytics.
  • Your account settings determine what data is visible to the public.

What you accept

If you use this site

Everyday words for the material promises and rights you give up. Each line includes a quote from the document.

Fineprint cannot see whether you agreed. This page is posted on their site. Open the original if you need to know how they say it applies.

  1. 01

    You are agreeing that GitHub collects your personal data to improve its products and services.

    This product

    “We use Personal Data to develop and improve our products, services, and technologies...”

What it can cost you

Downsides we could quote

Quoted clauses that can affect your privacy, money, or right to go to court — including terms that follow you to other products.

Highest-cost clauses first

High cost

Tracking you across apps

You are agreeing to allow tracking of your online activities by third parties for targeted advertising.

“Our analytics and advertising partners may use these technologies in our Services to collect personal information... related to your online activities over time and across Services for various purposes, including targeted advertising.”

What that means: Your activity is tracked across multiple services to show you relevant advertisements.

Third-party partners collect your usage data across different sites to build profiles for targeted ads.

Medium cost

Indefinite retention

You are agreeing to have your personal data retained indefinitely while your account is active.

“We’ll retain your Personal Data as long as your account is active and as needed to fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce agreements.”

What that means: Your data stays with GitHub indefinitely if it deems it necessary for legal or operational reasons.

The document states that data is kept for an indefinite period based on necessity rather than a fixed timeline.

Medium cost

Data sold or shared with third parties

You are agreeing to share your personal information with advertising and analytics networks.

“We shared each category to or with advertising networks, data analytics providers, and social networks.”

What that means: Your personal details are shared with advertising and analytics companies.

GitHub explicitly shares your personal information with advertising networks and analytics providers for business purposes.

Lower cost

Location or sensitive-data over-collection

You are agreeing to the collection of regional geolocation data.

“Depending on the Service's functionality, we collect regional geolocation data.”

What that means: Your general geographic location may be collected.

The service collects geolocation data, but only on a regional basis rather than precise real-time location.

If these terms already apply to you

Keep this list. Fineprint cannot undo or cancel something you already agreed to at the company.

We cannot see Agree on their site. With Premium, tap “I accepted these terms” if you already agreed to what GitHub asks.

News for this company

First readings and wording changes we could quote — the same items that appear on News.

All News
  1. Updated · Privacy policy

    GitHub privacy policy changed

    We quoted 6 wording changes below. The current grade is C.

    Wording we could quote

    • Changed

      Tracking you across apps

      Was

      “We and/or our partners also share the information we collect or infer with third parties for these purposes. ... track your interaction with the Services, develop inferences... across Services for various purposes, including targeted advertising.”

      Now

      “Our analytics and advertising partners may use these technologies in our Services to collect personal information... related to your online activities over time and across Services for various purposes, including targeted advertising.”
    • Changed

      Data sold or shared with third parties

      Was

      “We 'shared' the following categories of personal information... We shared each category to or with advertising networks, data analytics providers, and social networks. ... The business or commercial purpose of sharing personal information is to assist us with marketing, advertising, and audience measurement.”

      Now

      “We shared each category to or with advertising networks, data analytics providers, and social networks.”
    • Changed

      Location or sensitive-data over-collection

      Was

      “Geolocation Information: Depending on the Service's functionality, we collect regional geolocation data. ... Demographic information: In some cases, you provide us with ethnicity, gender, or similar demographic details.”

      Now

      “Depending on the Service's functionality, we collect regional geolocation data.”
    • No longer quoted

      Broad license to user content

      “User Content and Files: When you use our Services, we collect Personal Data included as part of the information you provide such as code, inputs, AI outputs, text, documents, images, or feedback. ... This includes improving features, developing new offerings, enhancing safety and security capabilities, and training models.”
    • No longer quoted

      Cookie consent that favors Accept

      “If you disable the non-essential cookies on the Enterprise Marketing Pages, the ads, content, and marketing you see may be less relevant. ... If you enable a browser extension designed to block tracking... non-essential cookies... may be disabled.”
    • No longer quoted

      Terms follow you to parks, stores, and other products

      “Our Services may contain links or buttons that lead to third-party services like Twitter or LinkedIn. Use of these features may result in data collection. Engaging with these buttons, tools, or content may automatically send certain browser information to these companies.”

    Oct 6, 2026 · C

  2. Updated · Privacy policy

    GitHub privacy policy changed

    We quoted 8 wording changes below. The grade moved from D to C.

    Wording we could quote

    • Changed

      Data sold or shared with third parties

      Was

      “If GitHub detects the GPC signal from your device, GitHub will not share your data (we do not sell your data).”

      Now

      “We 'shared' the following categories of personal information... We shared each category to or with advertising networks, data analytics providers, and social networks. ... The business or commercial purpose of sharing personal information is to assist us with marketing, advertising, and audience measurement.”
    • No longer quoted

      Forced arbitration or class-action waiver

      “An individual has the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms.”
    • Changed

      Tracking you across apps

      Was

      “Our emails to users may contain a pixel tag, which is a small, clear image that can tell us whether or not you have opened an email and what your IP address is.”

      Now

      “We and/or our partners also share the information we collect or infer with third parties for these purposes. ... track your interaction with the Services, develop inferences... across Services for various purposes, including targeted advertising.”
    • No longer quoted

      Children’s data

      “San Francisco, CA 94107 United States ## [Information for Minors](#information-for-minors) Our Services are not intended for individuals under the age of 13.”
    • Appeared

      Location or sensitive-data over-collection

      “Geolocation Information: Depending on the Service's functionality, we collect regional geolocation data. ... Demographic information: In some cases, you provide us with ethnicity, gender, or similar demographic details.”
    • Appeared

      Broad license to user content

      “User Content and Files: When you use our Services, we collect Personal Data included as part of the information you provide such as code, inputs, AI outputs, text, documents, images, or feedback. ... This includes improving features, developing new offerings, enhancing safety and security capabilities, and training models.”
    • Appeared

      Cookie consent that favors Accept

      “If you disable the non-essential cookies on the Enterprise Marketing Pages, the ads, content, and marketing you see may be less relevant. ... If you enable a browser extension designed to block tracking... non-essential cookies... may be disabled.”
    • Appeared

      Terms follow you to parks, stores, and other products

      “Our Services may contain links or buttons that lead to third-party services like Twitter or LinkedIn. Use of these features may result in data collection. Engaging with these buttons, tools, or content may automatically send certain browser information to these companies.”

    Sep 16, 2026 · C

  3. First reading · Privacy policy

    We read the GitHub privacy policy

    Fineprint found 5 quoted privacy clauses that match the consumer rubric. This is a reading aid, not legal advice.

    Sep 2, 2026 · D