Skip to main content

GitHubのプライバシーについての声明

Effective date: May 31, 2022

Thanks for entrusting GitHub Inc. or GitHub B.V. (“GitHub”, “we”, "us" or "our") with your source code, your projects, and your personal data. This Privacy Statement explains our practices regarding the collection, use, and disclosure of your data, including any personal data we collect and process in connection with our website and any applications, software, products, and services provided by GitHub, including any Beta Previews (collectively “Service”).

本文で注釈のない限り、すべての大文字の用語の定義は、GitHub利用規約にあります。

ショートバージョン

Githubではお客様の個人情報をプライバシーステートメントに記載のとおり使用します。 お客様の所在地や住所、どこの国の市民かに関係なく、出身国や所在地を問わず世界中のすべてのユーザーに対して等しく高水準のプライバシー保護を提供します。

To see our Privacy Notice to residents of California, please go to GitHub's Notice about the California Consumer Privacy Act or scroll down.

概要

セクション各セクションの内容
Who is responsible for the processing of your informationSubject to limited exceptions, GitHub is the controller and entity responsible for the processing of your personal data in connection with the Website or Service.
GitHubが収集する情報GitHubは、お客様の登録内容や支払い、取引、ユーザプロフィールから直接情報を収集します。 当社は、また、お客様の同意が必要な場合は同意を得て、自動的に利用情報、クッキー、およびデバイス情報から収集します。 GitHub may also collect personal data from third parties. We only collect the minimum amount of personal data necessary from you, unless you choose to provide more.
当社のお客様情報の利用方法In this section, we describe the ways in which we use your information, including to provide you the Service, to communicate with you, for security and compliance purposes, and to improve our Website or Service or develop new features and functionality of our Website or Service. 法令が要求している場合、さらに、お客様の情報を処理する法的な根拠を記載します。
当社が収集したお客様の情報の共有方法次のいずれかの場合において、当社はお客様の情報を第三者と共有することがあります。 ・お客様の同意がある場合 ・当社のサービスプロバイダ間と共有する場合 ・セキュリティを目的とする場合 ・当社の法的義務を遵守する必要がある場合 ・事業法人または事業部門について支配者の変更または売却が行われた場合 当社が個人情報を販売することはありません。GitHubでは広告を掲載することもありません。
Your choices regarding our processing of your personal data当社は、お客様に対して、お客様の個人情報にアクセス、変更または削除する方法を提供します。
クッキーWe only use strictly necessary cookies to provide, secure, and improve our Website or Service or develop new features and functionality of our Website or Service. 当社は、このクッキーとトラッキングについて透明性の高いページを提供します。 We do not send any information to third-party analytics services.
お客様情報についての当社の保護方法We take all measures reasonably necessary to protect the confidentiality, integrity, and availability of your personal data on GitHub and to protect the resilience of our servers.
Communication preferences当社は、お客様にemailでご連絡します。 アカウント設定または当社にご連絡いただければ、当社からお客様への方法を管理できます。
苦情の解決万が一、当社がプライバシーに関する懸念を迅速かつ十分に解決できない場合、当社は紛争解決の方法を提案します。
プライバシーステートメントの変更当社は、本プライバシーステートメントの重大な変更について当該変更が有効となる30日前に、お客様に通知します。 お客様は、変更を当社のサイトポリシーリポジトリにおいて確認することもできます。
ライセンス本プライバシーステートメントは、Creative Commons Zero licenseの元でライセンス付与されています。
GitHubへの連絡当社のプライバシーステートメントに関するご質問がある場合はお気軽にお問い合わせください。
翻訳当社では、一部のプライバシーステートメントの翻訳のリンクを提供しています。

GitHubのプライバシーについての声明

Who is responsible for the processing of your information?

The data controller of your personal data is GitHub, Inc. For individuals outside North America, the data controller is GitHub B.V.

This privacy statement does not apply to personal data we process as a service provider or data processor on behalf of our enterprise customers. Our data processing activities as service processor or data processor is governed by our Data Protection Agreement. If you are a consumer end-user of one of those organizations, you should read that organization’s privacy statement and direct any privacy inquiries to that organization.

GitHub acting on your behalf

In some cases, GitHub is acting only on your behalf for the personal data we collect and process in connection with our Service (for example, for the personal data added to a repository by the contributors to such repository). In such cases, GitHub will only process the data in order to provide the Service requested by you. Please note that subject to our Private Information Removal Policy contributors’ requests to remove personal data generally require notice to and action from the repository owner.

GitHubが収集する情報

The personal data we collect depends on how you interact with us, the services you use, and the choices you make. We collect information about you from different sources and in various ways when you use our Service, including information you provide directly, information collected automatically, third-party data sources, and data we infer or generate from other data.

ユーザがGitHubに直接提供する情報

We collect personal data you provide to us. 例:

登録情報

We collect information such as your username, email address, and password during account creation.

Demographic information

In some cases, we request that you provide age, gender, and similar demographic details.

Payment and billing information

If you make a purchase or other financial transaction, we collect credit card numbers, financial account information, and other payment details.

Content and files

We collect any photographs, documents, or other files you upload to our Service; and if you send us email messages or other communications, we collect and retain those communications. For example, you may choose to give us more information for your Account profile, such as your full name, an avatar which may include a photograph, your biography, your location, your company, and a URL to a third-party website. プロフィール情報は、当社のサービスを使用する他のユーザからも閲覧ができますのでご注意ください。

Information GitHub automatically collects.

When you visit or use our Service, we collect some information automatically. 例:

Transaction information

If you have a paid Account with us, or make a purchase or sale using our Service, we automatically collect certain information about your transactions on the Service, such as your full name, address, region, state, country, zip code, the date, time, and amount charged.

利用情報

If you're accessing or using our Service, we may automatically collect information about how you use the Service, such as the pages you view, the referring site, your IP address and information about your device, session information, the date and time of each request, information contained in or relating to your contributions to individual repositories, and telemetry data (i.e., information about how a specific feature or service is performing) regarding your use of other features and functionality of the Service.

クッキー

As further described below, we automatically collect information from cookies (such as cookie ID and settings) in connection with our Service.

デバイス情報

We may collect information about your device, such as its IP address, browser or client application information, language preference, operating system and application version, device type and ID, and device model and manufacturer.

Geolocation information

In connection with certain features and depending on the functionality of the Service, we collect geolocation information such as through IP addresses or the location information you choose to provide in your Account profile.

Information we create or generate

We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics (“inferences”). For example, we infer your general geographic location (such as city, state, and country) based on your IP address.

当社から第三者から収集する情報

Other companies with whom you choose to engage. GitHub may collect personal data about you from third parties. たとえば、お客様が、トレーニングにサインアップしたり、当社のベンダー、パートナーや関連会社からGitHubについての情報を受け取る場合に、行われる可能性があります。 GitHub does not purchase personal data from third-party data brokers.

Service Providers. We may also receive information from processors or service providers who process the data on our behalf, such as our payment processor who process payment and billing information in connection with our Service.

Content you post on our Service. Information you store in, or contribute to, a public repository, provide for use in connection with a Community Feature or make otherwise publicly available through the Service will be collected by GitHub as described in this Privacy Statement. Such information may also be available to the GitHub user community as well as the general public. For more information, please review details regarding public repositories and community features here.

Co-branding/marketing partners. We may receive information from partners with which we offer co-branded services or engage in joint marketing activities.

Publicly available sources. We may also obtain information from publicly available sources as GitHub repositories.

When you are asked to provide personal data, you may decline. And you may use web browser or operating system controls to prevent certain types of automatic data collection. But if you choose not to provide or allow information that is necessary for certain services or features, those services or features may not be available or fully functional.

当社のお客様情報の利用方法

We may use your information to provide, administer, analyze, manage, and operate our Service. For example, we use your information for the following purposes:

  • Provide our products and deliver our services including troubleshooting, improving, and personalizing the features on the Service.
  • Business operations such as billing, accounting, improving our internal operations, securing our systems, detecting fraudulent or illegal activity, and meeting our legal obligations.
  • Improve and develop our products and services including to develop new services or features, and conduct research.
  • Personalization of our Service by understanding you and your preferences to enhance your experience and enjoyment using our Service.
  • Provide customer support and respond to your questions.
  • Deliver promotional communications with you about new services, features, offers, promotions, and other information about our Service.
  • Send you information, including confirmations, invoices, technical notices, updates, security alerts, support and administrative messages.

We combine data we collect from different sources for these purposes and to give you a more seamless, consistent, and personalized experience.

当社が収集したお客様の情報の共有方法

We share personal data with your consent or as necessary to complete your transactions or provide the services you have requested or authorized. In addition, we may share each of the categories of your personal data described above with the types of third parties described below for the following business purposes:

Public information

You may select options available through our Service to publicly display and share your name and/or username and certain other information, such as your profile, demographic data, content and files, or geolocation data. For example, if you would like your email address to remain private, even when you’re commenting on public repositories, you can adjust your setting for your email address to be private in your user profile. You can also update your local Git configuration to use your private email address. コミットメッセージ内のメールアドレスに関する詳細については、こちらを参照してください。

Please note that if you would like to compile GitHub data, you must comply with our Terms of Service regarding information usage and privacy, and you may only use any public-facing information you gather for the purpose for which our user authorized it. For example, where a GitHub user has made an email address public-facing for the purpose of identification and attribution, do not use that email address for the purposes of sending unsolicited emails to users or selling personal information, such as to recruiters, headhunters, and job boards, or for commercial advertising. We expect you to reasonably secure information you have gathered from GitHub, and to respond promptly to complaints, removal requests, and "do not contact" requests from GitHub or GitHub users.

Third-party applications

We share your personal data with third parties when you tell us to do so. For example, if you purchase an application listed on our Marketplace, we share your username to allow the application developer to provide you with services. Additionally, you may direct us through your actions on GitHub to share your personal data. たとえば、お客様がOrganizationに参加する場合、OrganizationのオーナーにOrganizationのアクセスログを使ってお客様のアクティビティを表示する権限を付与したい旨を指示できます。

You can enable or add third-party applications, known as "Developer Products" to your Account. このDeveloper Productsは、お客様がGitHubを利用するにあたって、必ずしも必要なものではありません。 We will share your personal data with such third-party applications when you ask us to; however, you are responsible for your use of the third-party Developer Product and for the amount of personal data you choose to share with it. You can check our API documentation to see what information is provided when you authenticate into a Developer Product using your GitHub profile.

Organizations with which you engage

You may indicate, through your actions on GitHub, that you are willing to share your personal data. If you collaborate on or become a member of an organization, then its Account owners may receive your personal data. When you accept an invitation to an organization, you will be notified of the types of information owners may be able to see (for more information, see About Organization Membership). Please contact the Account owners for more information about how they might process your personal data in their Organization and the ways for you to access, update, alter, or delete your personal data stored in the Account.

サービスプロバイダ

We share your personal data with service providers who process the information on our behalf to provide or improve our Service. For example, our service providers may perform payment processing, customer support ticketing, network data transmission, security, and other similar services. While GitHub processes all personal data in the United States, our service providers may process data outside of the United States or the European Union. Such processing by service providers will be in compliance with applicable law including any relevant transfer mechanism.

Affiliates We enable access to personal data across our subsidiaries, affiliates, and related companies, for example, where we share common data systems or where access is needed to operate and provide the Service.

セキュリティを目的とする場合

We will disclose personal data if we believe it is necessary to:

  • protect our customers and others, for example to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury of anyone;
  • operate and maintain the security of the Service, including to prevent or stop an attack on our systems or networks; or
  • protect the rights or property or ourselves or others, including enforcing our agreements, terms, and policies.

GitHub may disclose personal data or other information we collect about you to law enforcement or other governmental agencies if required in response to a valid legal process. For more information about our disclosure in response to legal requests, see our Guidelines for Legal Requests of User Data.

管理者の変更または売却があった場合

We may share your personal data if we are involved in a merger, sale, or acquisition of corporate entities or business units as described in this Privacy Statement.

Please note that some of the features on our Service include integrations, references, or links to services provided by third parties whose privacy practices differ from ours. If you provide personal data to any of those third parties, or allow us to share personal data with them, that data is governed by their privacy statements.

Finally, we may share de-identified information in accordance with applicable law.

No selling of personal data

We do not sell your personal data for monetary or other consideration as defined under California and Nevada state laws. You can learn more about the CCPA and how we comply with it here.

Your choices regarding our processing of your personal data

We provide choices about the personal data we collect about you. The choices you make will not apply to any personal data associated with an Organization under your Account.

Access, correction, and deletion. If you're a GitHub user, you may access, update, alter, or delete your basic user profile information by editing your user profile or contacting GitHub Support or GitHub Premium Support. 当社がお客様について収集する情報は、プロフィールに掲載する情報を限定する、お客様の情報を最新に保つ、またはGitHub SupportもしくはGitHubPremium Supportに連絡することにより管理できます。

We retain and use your information as described in this Privacy Statement, but barring legal requirements, we will delete your full profile within 90 days of your request. アカウントが削除された後でも、他のユーザのリポジトリへのコントリビューションおよび他のIssueのコメントなどの一定のデータは残存します。 However, we will delete or de-identify your personal data, including your username and email address, from the author field of issues, pull requests, and comments by associating them with a ghost user. That said, the email address you have provided via your Git commit settings will always be associated with your commits in the Git system. メールアドレスを非公開にする場合、Gitコミット設定もアップデートする必要があります。 当社は、Gitコミット履歴のデータを変更または削除することはできません。Gitソフトウェアは記録を保持する設計になっています。ただし、当社は、お客様がその記録に入力する情報を管理できるようにします。

If GitHub processes personal data other than your profile information, such as information about you GitHub receives from third parties, then you may, subject to applicable law, access, update, alter, delete, object to or restrict the processing of your personal data by contacting GitHub Support or GitHub Premium Support.

You can adjust the settings on your Account regarding the display of your personal data in private or public repositories or personal data processed in connection with Community Features (such as GitHub Feed, GitHub Sponsors, and GitHub Explore) through profile settings.

Additionally, if you are unable to access certain personal data we have via the means described above, you can request access by contacting us as described at the bottom of this privacy statement.

データポータビリティ

GitHubユーザとして、お客様は、常に自らのデータを保有することができます。 You can clone your repositories to your desktop, for example, or you can use our Data Portability tools to download information we have about you.

Communication preferences

We use your email address to communicate with you, if you've said that's okay, and only for the reasons you’ve said that’s okay. たとえば、お客様が当社のサポートチームにリクエストを連絡した場合、当社はemailでお返事します。 You have control over how your email address is used and shared on and through our Service. You may manage your communication preferences in your profile.

By design, the Git version control system associates many actions with a user's email address, such as commit messages. See more details regarding setting your commit email address.

Depending on your email settings, GitHub may occasionally send notification emails, for example, about changes in a repository you’re watching, new features, requests for feedback, important policy changes, or to offer customer support. We may also send marketing emails, based on your choices and in accordance with applicable laws and regulations. 当社がお客様に送信するマーケティングemailの文末には、「サブスクライブ解除」のリンクがあります。

当社から、サポートチームまたはシステムemailなどの重要なコミュニケーションの受け取りを解除することはできません。ですが、その他のコミュニケーションについては、プロフィールの通知設定を変更することで解除できます。

European Data Protection Rights

If the processing of personal data about you is subject to European Union data protection law, you have certain rights with respect to that data:

You can request access to, and rectification or erasure of, personal data; If any automated processing of personal data is based on your consent or a contract with you, you have a right to transfer or receive a copy of the personal data in a usable and portable format; If the processing of personal data is based on your consent, you can withdraw consent at any time for future processing; You can to object to, or obtain a restriction of, the processing of personal data under certain circumstances; and For residents of France, you can send us specific instructions regarding the use of your data after your death.

To make such requests, please use the contact information at the bottom of this statement. When we are processing data on behalf of another party (i.e., where GitHub is acting as a data processor) you should direct your request to that party. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns.

We rely on different lawful bases for collecting and processing personal data about you, for example, with your consent and/or as necessary to provide the services you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests.

Our use of cookies and tracking technologies

Cookies and tracking technologies

GitHub uses cookies to provide, secure and improve our Service or to develop new features and functionality of our Service. For example, we use them to keep you logged in, remember your preferences, identify your device for security purposes, compile statistical reports, and provide information for future development of GitHub. We use our own cookies and do not use any third-party service providers in this context. If you disable your browser or device’s ability to accept these cookies, you will not be able to log in or use our Service. GitHub上のクッキーについては、GitHubの当社のサブプロセッサーおよびクッキーのページで、当社が設定するクッキー、クッキーの必要性、およびクッキーの有効期限について詳しく説明しています。

Our emails to users may contain a pixel tag, which is a small, clear image that can tell us whether or not you have opened an email and what your IP address is. We use this pixel tag to make our email communications more effective and to make sure we are not sending you unwanted email.

DNT

Do Not Track」(DNT) とは、オンラインサービスに対して、第三者のトラッキングサービスからお客様のオンライン活動についての特定の種類の情報を収集して共有することを望まない場合に、ブラウザで設定できるプライバシー設定です。 GitHubは、ブラウザのDNTシグナルに応答し、DNTシグナルへの応答についてのW3C基準に従います。 トラッキングを望まないことを通知するようブラウザに対して設定したい場合、この通知を有効化する方法について、ブラウザのドキュメントをご確認ください。 Privacy Badgerなど、トラッキングをブロックする良いアプリケーションもあります。

Retention of personal data

We retain personal data for as long as necessary to provide the services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations. For example, we may retain your personal data for longer periods, where necessary, subject to applicable law, for security purposes.

お客様情報についての当社の保護方法

GitHub takes reasonable measures necessary to protect your personal data from unauthorized access, alteration, or destruction; maintain data accuracy; and help ensure the appropriate use of your personal data. To help us protect personal data, we request that you use a strong password and never share your password with anyone or use the same password with other sites or accounts.

In addition, if your account has private repositories, you control the access to that Content. GitHub personnel does not access private repository content except for

  • security purposes,
  • automated scanning for known vulnerabilities, active malware, or other content known to violate our Terms of Service
  • リポジトリのオーナーをサポートするため
  • サービスの完全性を維持するため
  • to comply with our legal obligations if we have reason to believe the contents are in violation of the law,
  • or with your consent.

Github will provide notice regarding private repository access where not prohibited by law or if in response to a security threat or other risk to security.

クロスボーダーデータトランスファー

GitHub processes personal data both inside and outside of the United States and relies on legal mechanisms such as Standard Contractual Clauses to lawfully transfer data from the European Economic Area, the United Kingdom, and Switzerland to the United States. You may request a copy of the Standard Contractual Clauses using the contact details provided in the section entitled “Contacting GitHub” below.

苦情の解決

If you have concerns about the way GitHub is handling your personal data, please let us know immediately. 当社はお客様を手助けしたいと考えています。 お客様は、プライバシー連絡フォームに記入することで、当社に連絡できます。 You may also email us directly at (privacy [at] github [dot] com) with the subject line "Privacy Concerns." 当社は、遅くとも45日以内に速やかに返信します。

お客様は、当社のデータ保護責任者に直接連絡することもできます。

当社の米国本社当社のEU事務所
GitHub Data Protection OfficerGitHub BV
88 Colin P. Kelly Jr. St.Vijzelstraat 68-72
San Francisco, CA 941071017 HL Amsterdam
米国The Netherlands
privacy [at] github [dot] comprivacy [at] github [dot] com

紛争解決プロセス

お客様のユーザ個人情報の当社の取り扱いについてお客様と当社との間に紛争が生起した場合、当社は解決のために最善を尽くします。 さらに、お客様がEU加盟国の住民である場合、現地の監督当局に苦情を申し立てる権利を有します。また、別の選択肢がある場合もあります。

プライバシーステートメントの変更

ほとんどの変更は軽微ですが、GitHubは、随時、プライバシーステートメントを変更することがあります。 当社は、ホームページに通知を掲載すること、または、GitHubアカウントで指定するプライマリメールアドレスにemailを送信することで、変更が発効する遅くとも30日前にウェブサイト上で、このプライバシーステートメントの重要な変更についてユーザへの通知を提供します。 また、当社は、このポリシーの変更を追跡しているサイトポリシーリポジトリをアップデートします。 本プライバシーステートメントのその他の変更については、サイトポリシーのリポジトリをwatchまたは確認するようユーザにおすすめします。

ライセンス

本プライバシーステートメントは、このCreative Commons Zero licenseの元でライセンス付与されています。 詳細は、site-policyリポジトリを参照してください。

GitHubへの連絡

GitHubプライバシーステートメントまたは情報処理についてのご質問は、プライバシー連絡フォームをご利用ください。

翻訳

下記は、本ドキュメントの他言語への翻訳です。 これらのバージョンと英語バージョンとの間に何らかの矛盾、曖昧さ、または、明らかな非一貫性がある場合、英語バージョンを優先的なバージョンとします。

フランス語

Cliquez ici pour obtenir la version française: Déclaration de confidentialité de GitHub

その他の翻訳

この声明の他の言語への翻訳については、https://docs.github.com/にアクセスし、[English] のドロップダウンメニューから言語を選択してください。

GitHub's notice to California residents

2018年のカリフォルニア州消費者プライバシー法 (Cal. Civ. Code §1798.100 以降の条文 (改訂された場合はその改訂版)、以下「CCPA」) は、カリフォルニア州住民に自らの個人情報に対する権利と管理権を与えるものです。 GitHub, Inc. (「GitHub」または「当社」) は、CCPA に基づく要件に従い、カリフォルニア州住民 (「お客様」) の個人情報の収集および取り扱いに関して特定の開示を行うため、カリフォルニア州住民に対して本声明を規定します。 これはCCPAに基づき、GitHubがカリフォルニア州住民に限定して付与する消費者のプライバシー権について説明するものです。 個人情報を管理するというCCPAの中核的な権利を、米国の当社全ユーザに拡大したことに関する情報については、当社の「プライバシーについての声明」を参照してください。

Our handling of personal information

While the table below contains information about the categories of personal information we collect, process, and share, please see the GitHub Privacy Statement for full details.

過去12か月間に収集された個人情報の類型個人情報が収集された情報源の類型
識別子 (実名、エイリアス、住所、固有の個人識別子、オンライン識別子、インターネットプロトコルアドレス、メールアドレス、アカウント名、その他の類似する識別子など)Information consumer provides directly or automatically through their interaction with our Service and/or Website or GitHub’s vendors, partners, or affiliates
Personal information described in Cal. Civ. Code §1798.80 (e) such as name, address, credit card or debit card number)Information consumer may choose to provide directly, through service providers
Characteristics of protected classifications under California or federal law (such as gender)消費者が直接提供することを選択できる情報
商業的情報 (製品やサービスの購入、取得、検討、その他購入または消費の履歴や傾向など)当社サービスとのやりとりにより消費者が直接的または自動的に提供する情報
Geolocation data (such as any information collected after giving users the opportunity to opt-in to location-based services, which rely upon a device’s precise location services. )Information consumer provides automatically through their interaction with our Services
Audio, electronic, visual, or similar information such as content and files uploaded to the Service.消費者が直接提供することを選択できる情報
Professional or employment information消費者が直接提供することを選択できる情報
Inferences drawn from any of the information identified in this table to create a profile about a consumer reflecting the consumer’s preferences当社サービスとのやりとりにより消費者が直接的または自動的に提供する情報

We use the categories of personal information described above for the purposes listed in the “How GitHub uses your information” section of our Privacy Statement. We also disclose the categories of personal information listed above for business purposes. Please see the “How we share the information we collect” section of our Privacy Statement for additional details.

個人情報は販売いたしません

CCPAの下では、カリフォルニア州住民の個人情報を他者に販売する企業は、1) 個人情報を他者に販売する前にカリフォルニア州住民に通知する義務があり、2) カリフォルニア州住民に個人情報の販売をオプトアウトする権利を与える義務があります。 GitHub does not sell personal information, including personal information of anyone under 16 years old.

CCPAに基づくあなたの権利

CCPAは、カリフォルニア州住民に、個人情報に関する特定の権利を付与します。 この権利に基づく請求を提出するには、連絡フォームからご連絡ください。

請求を受領した際、当社はリクエストを行った方が、個人情報の請求対象に関係する住民であるかどうかを検証します。 California residents may exercise their rights themselves or may use an authorized agent, designated in writing or through a power of attorney, to make requests on their behalf. If you use an authorized agent to submit a request, we may require that you provide us additional information demonstrating that the agent is acting on your behalf, and we may need you to verify your identity directly with us. With respect to your personal information, California residents may exercise the rights described below.

Right to Know.

You have a right to request that we disclose to you the personal information we have collected about you. You also have a right to request additional information about our collection, use, disclosure, or sale of such personal information. Note that we have provided much of this information in this privacy statement. You can use GitHub’s User Migration API to access and download your data. Learn more here. You may also make such a “request to know” by contacting us here.

Right to Request Deletion.

You also have a right to request that we delete personal information under certain circumstances, subject to a number of exceptions. To make a request to delete, You can use GitHub’s User Migration API to access and download your data. Learn more here. You may also make such a “request to delete” by contacting us here.

Right to Opt-Out.

You have a right to opt-out from future “sales” of personal information. Note that we do not “sell” personal information as defined by the CCPA and have not done so in the past 12 months.

Right to Non-Discrimination.

You have a right to not be discriminated against for exercising your CCPA rights. We will not discriminate against you for exercising your CCPA rights.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us. Further, to provide or delete specific pieces of personal information we will need to verify your identity to the degree of certainty required by law. We will verify your request by asking you to submit the request from the email address associated with your account or requiring you to provide information necessary to verify your account. Please note that you may use two-factor authentication with your GitHub account.
Finally, you have a right to receive notice of our practices at or before collection of personal information.

Additionally, under California Civil Code section 1798.83, also known as the “Shine the Light” law, California residents who have provided personal information to a business with which the individual has established a business relationship for personal, family, or household purposes (“California Customers”) may request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. Please be aware that we do not disclose personal information to any third parties for their direct marketing purposes as defined by this law. California Customers may request further information about our compliance with this law by emailing (privacy [at] github [dot] com). Please note that businesses are required to respond to one request per California Customer each year and may not be required to respond to requests made by means other than through the designated email address.

California residents under the age of 18 who are registered users of online sites, services, or applications have a right under California Business and Professions Code Section 22581 to remove, or request and obtain removal of, content or information they have publicly posted. To remove content or information you have publicly posted, please submit a Private Information Removal request. Alternatively, to request that we remove such content or information, please send a detailed description of the specific content or information you wish to have removed to GitHub support. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances. If you have any questions about our privacy practices with respect to California residents, please contact us via our contact form.