GitHub
Owned by Microsoft / GitHub
docs.github.com ↗Privacy Panel Label
Privacy Panel
GitHub
Data Collected
●Financial & Payment Datasensitive
Payment information
Billing address
●Message & Email Contentsensitive
User content and files
●Race, Religion & Demographicssensitive
Demographic information
●Precise Locationsensitive
Geolocation information
○Device & Online IDs
GitHub handle
Profile information
IP address
Advertising IDs
○Contact Info
Name
Email address
Company name
○Purchases & Transactions
Transaction information
○Employment & Education
Job title
○App Usage & Diagnostics
Device information
Service usage information
○Browsing & Search History
Website usage data
Cookie and tracking data
○Photos, Videos & Audio
Images and multimedia files
Data Sharing & Use
noSold to third parties
10 recipient categories (Abuse and fraud prevention entities, Affiliates (including Microsoft), GitHub organization accounts, …)
YESShared for advertising
YESCross-site tracking
YESUsed for profiling / AI decisions
YESUsed to train AI models
YESDisclosed to law enforcement
Data Uses
Core serviceSecurity / fraudAdvertisingPersonalizationAnalyticsAI/ML trainingThird-party partnerships
Data Retention
Indefinite
Varies by data type
Includes legally mandated retention
GitHub retains Personal Data as long as the account is active and as needed to f…
Consumer Rights
Access
Delete
Portability
Correct
Opt-out
Security
?
Encrypted in transit?
Encrypted at rest?
MFA available?
Breach notificationBrowser Privacy Signals
honoredGPC / DNT
This label summarizes privacy practices as disclosed in the company's privacy policy. This is not legal advice. Full policy ↗
This label summarizes privacy practices as disclosed in the company's privacy policy. It is a neutral, factual restatement — not an evaluation. What is this?
Source Evidence
Report an issueIf a specific extraction below looks wrong (the quote does not match the policy, or the YES/no is misinterpreted), use the per-finding flag to help us improve.
What's on the label
Sold to third parties
no97% confidence
If GitHub detects the GPC signal from your device, GitHub will not share your data (we do not sell your data).view in policy ↗
Shared for advertising
YES97% confidence
We may also employ third-party Cookies to gather data for interest-based advertising.view in policy ↗
Cross-site tracking
YES92% confidence
our analytics and advertising partners may use these technologies in our Services to collect personal information (such as the pages you visit, the links you click on, and similar usage information, identifiers, and device information) related to your online activities over time and across Services for various purposes, including targeted advertising.view in policy ↗
Used for profiling
YES85% confidence
Inference: We generate new information from other data we collect to derive likely preferences or other characteristics. For instance, we infer your general geographic location based on your IP address.view in policy ↗
Used to train AI
YES92% confidence
We use Personal Data to develop and improve our products, services, and technologies, including artificial intelligence and machine learning technologies. This includes improving features, developing new offerings, enhancing safety and security capabilities, and training models.view in policy ↗
Signals & rights
Honors GPC
YES99% confidence
You may use the Global Privacy Control (GPC) to communicate your privacy preferences. If GitHub detects the GPC signal from your device, GitHub will not share your data (we do not sell your data).view in policy ↗
Honors DNT
YES97% confidence
If your browser sends a Do Not Track (DNT) signal, GitHub will not set non-essential cookies and will not load third party resources which set non-essential cookies.view in policy ↗
Sources / Provenance
Analyzed June 3, 2026 · policy fetched June 3, 2026
Archived copy ↗ · captured Jun 2, 2026
Source hash: d3f3b329a215…