GitHub General Privacy Statement

GitHub · agreement dated April 27, 2026 · Official agreement

Read the agreement

10 of 102 cards in Account & Service Control

Account & Service Control · User right or choice

Depending on where you live, you may access your data and request details of what was collected in the past 12 months

Depending on where you live, you may have the right to access the data collected about you and to request detailed information about the specific types of Personal Data GitHub collected over the past 12 months, including data disclosed for business purposes.

Supporting quotations

Depending on your residence location, you may have specific legal rights regarding your Personal Data:
The right to access the data collected about you
The right to request detailed information about the specific types of Personal Data we've collected over the past 12 months, including data disclosed for business purposes

Qualifications & exceptions

  • These rights depend on where you live; the Statement says you "may" have them.

Account & Service Control · User right or choice

You may be able to correct, erase, limit or object to processing of your data, under conditions

Depending on where you live, you may have the right to rectify or update inaccurate or incomplete Personal Data under certain circumstances, to erase or limit its processing under specific conditions, and to object to processing as allowed by applicable law.

Supporting quotations

Depending on your residence location, you may have specific legal rights regarding your Personal Data:
The right to rectify or update inaccurate or incomplete Personal Data under certain circumstances
The right to erase or limit the processing of your Personal Data under specific conditions
The right to object to the processing of your Personal Data, as allowed by applicable law

Qualifications & exceptions

  • These rights depend on where you live; the Statement says you "may" have them.
  • Each right is conditional: "under certain circumstances", "under specific conditions" or "as allowed by applicable law".

Not stated here

  • The circumstances and conditions are not specified in the Statement.

Account & Service Control · User right or choice

You may withdraw consent and receive your data in a portable machine-readable format where feasible

Depending on where you live, you may have the right to withdraw consent where processing is based on it, and to receive your collected Personal Data in a structured, commonly used, machine-readable format to transfer it to another company, where technically feasible.

Supporting quotations

Depending on your residence location, you may have specific legal rights regarding your Personal Data:
The right to withdraw consent, where processing is based on your consent
The right to receive your collected Personal Data in a structured, commonly used, and machine-readable format to facilitate its transfer to another company, where technically feasible

Qualifications & exceptions

  • These rights depend on where you live; the Statement says you "may" have them.
  • Portability applies only where technically feasible; withdrawal applies only to consent-based processing.

Account & Service Control · Procedure

Exercise rights by emailing privacy@github.com; GitHub may ask for more information to verify your identity

To exercise these rights you email privacy[at]github[dot]com and follow the instructions. GitHub may request extra information to verify your identity before handling the request. Feedback or concerns go to the Data Protection Officer at dpo[at]github[dot]com.

Supporting quotations

To exercise these rights, please send an email to privacy[at]github[dot]com and follow the instructions provided.
To verify your identity for security, we may request extra information before addressing your data-related request.
Please contact our Data Protection Officer at dpo[at]github[dot]com for any feedback or concerns.

Account & Service Control · Restriction or exception

The Services are not intended for children under 13, and GitHub does not intentionally collect their data

GitHub's Services are not intended for individuals under 13, and GitHub does not intentionally gather Personal Data from them. If you become aware that a minor has provided Personal Data, you are asked to notify GitHub.

Supporting quotations

Our Services are not intended for individuals under the age of 13. We do not intentionally gather Personal Data from such individuals.

Qualifications & exceptions

  • The commitment is not to collect "intentionally"; it does not say collection never happens.

Not stated here

  • The Statement does not say what GitHub does after being notified.

Account & Service Control · User right or choice

US state residents can request details of the personal information collected and correct inaccuracies

Under rights common to US state privacy laws, you can request details of the specific personal information GitHub has collected about you and correct inaccurate information by contacting GitHub. You can also access and edit basic account information in your settings.

Supporting quotations

US State Specific Information
These rights are common to the US State privacy laws:
You have the right to request details on the specific personal information we’ve collected about you and the right to correct inaccurate information. You can exercise this right by contacting us. You can also access and edit basic account information in your settings.

Qualifications & exceptions

  • Applies to residents of certain US states with their own privacy laws; the states are not all named in this section.

Account & Service Control · User right or choice

US state residents can request deletion, subject to legal, fraud, abuse and security exceptions

You can request deletion of your data, except where GitHub must retain it to comply with legal obligations, detect fraud, investigate abuse reports or other Terms of Service violations, or fix security issues. On a verified request GitHub will promptly delete your personal information (unless an exception applies) and instruct its service providers to do the same. GitHub says it uses brief retention terms by design.

Supporting quotations

US State Specific Information
You reserve the right to request the deletion of your data, barring a few exceptions.
Such exceptions include circumstances where we are required to retain data to comply with legal obligations, detect fraudulent activity, investigate reports of abuse or other violations of our Terms of Service, or rectify security issues.
Upon receiving your verified request, we will promptly delete your personal information (unless an exception applies), and instruct our service providers to do the same.
We employ brief retention terms by design.

Qualifications & exceptions

  • Applies to residents of certain US states with their own privacy laws; the states are not all named in this section.
  • Deletion follows only a verified request and is subject to the listed exceptions, which are introduced by "include" and may not be exhaustive.

Not stated here

  • "Brief retention terms" are not quantified.

Account & Service Control · Company commitment

Two free requests per 12 months, answered within 45 days, extendable by 45 more in complex cases

You can make two free requests in any 12-month period. GitHub commits to responding within 45 days and may extend this by another 45 days in complex cases. GitHub will not hold it against you when you exercise your rights.

Supporting quotations

US State Specific Information
You are allowed to make two free requests in any 12-month period. We commit to responding to your request within 45 days. In complex cases, we may extend our response time by an additional 45 days.
We will not hold it against you when you exercise any of your rights.

Qualifications & exceptions

  • Applies to residents of certain US states with their own privacy laws; the states are not all named in this section.

Not stated here

  • The Statement does not say whether further requests in the same period are charged or refused.

Account & Service Control · Procedure

Make US state requests by emailing privacy@github.com; authorized agents need your signed permission

To make an access, deletion, correction or opt-out request, email privacy[at]github[dot]com and follow the instructions. GitHub may need to verify your identity first. An authorized agent may submit a request for you if they have your signed permission or power of attorney as required.

Supporting quotations

US State Specific Information
To make an access, deletion, correction, or opt-out request, please send an email to privacy[at]github[dot]com and follow the instructions provided. We may need to verify your identity before processing your request.
If you choose to use an authorized agent to submit a request on your behalf, please ensure they have your signed permission or power of attorney as required.

Qualifications & exceptions

  • Applies to residents of certain US states with their own privacy laws; the states are not all named in this section.

Account & Service Control · User right or choice

Colorado, Connecticut and Virginia residents can appeal a denied rights request

If you live in Colorado, Connecticut or Virginia and GitHub denies your rights request, you can appeal; GitHub will provide the information needed to appeal at that time.

Supporting quotations

If you live in Colorado, Connecticut, or Virginia you have some additional rights:
If we deny your rights request, you have the right to appeal that decision. We will provide you with the necessary information to submit an appeal at that time.