GitHub General Privacy Statement

GitHub · agreement dated April 27, 2026 · Official agreement

Read the agreement

3 of 102 cards in Retention & Deletion

Retention & Deletion · Restriction or exception

GitHub aims to respond promptly but may keep some data for legal obligations or legal claims

GitHub aims to respond promptly to rights requests in line with legal requirements. It may retain certain data as necessary for legal obligations or for establishing, exercising or defending legal claims.

Supporting quotations

We aim to promptly respond to requests in compliance with legal requirements.
Please note that we may retain certain data as necessary for legal obligations or for establishing, exercising, or defending legal claims.

Qualifications & exceptions

  • This retention exception limits erasure requests.

Not stated here

  • No response deadline is stated; "promptly" is an aim.

Cross-references

Retention & Deletion · Company practice

Data is kept while your account is active and as needed for contracts, legal duties, disputes and enforcement

GitHub retains your Personal Data as long as your account is active and as needed to fulfill contractual obligations, comply with legal requirements, resolve disputes and enforce agreements. The retention period depends on the purpose of collection and any legal obligations.

Supporting quotations

We’ll retain your Personal Data as long as your account is active and as needed to fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce agreements.
The retention duration depends on the purpose of data collection and any legal obligations.

Qualifications & exceptions

  • Retention can continue after account closure where needed for the listed purposes.

Not stated here

  • No specific retention periods are given.

Retention & Deletion · Context

Session cookies last until you stop browsing; persistent cookies last until they expire or are deleted

How long a cookie stays depends on its type: session cookies stay only until you stop browsing, while persistent cookies stay until they expire or are deleted. A persistent cookie's expiry depends on its purpose and the tool used. You may be able to delete cookie data.

Supporting quotations

Session cookies will only stay on your device until you stop browsing. Persistent cookies stay until they expire or are deleted.
The expiration time or retention period applicable to persistent cookies depends on the purpose of the cookie collection and tool used. You may be able to delete cookie data.

Qualifications & exceptions

  • In the saved version this cookie text follows the "Other translations" heading without a heading of its own; it is read as the Statement's cookie section.
  • Deleting cookie data is described as something you "may be able" to do.

Not stated here

  • No specific expiry periods are given.