Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Sep 16, 2026; our capture on Oct 15, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“Any person, entity, or service collecting data from the Service must comply with the GitHub Privacy Statement, particularly in regards to the collection of personal information.”
“We also reserve the right—after providing advance notice—to delete repositories that we determine to be placing undue strain on our infrastructure.”
“If we determine your bandwidth usage to be significantly excessive in relation to other users of similar features, we reserve the right to suspend your Account, throttle your file hosting...”
“GitHub retains full discretion to take action in response to a violation of these policies, including account suspension, account termination, or removal of content.”
“You must not engage in activity that significantly harms other users.”
“infringes any proprietary right of any party, including patent, trademark, trade secret, copyright, right of publicity, or other right”
This document sets the rules for what users can and cannot do on GitHub, and explains what GitHub can do if those rules are broken. You are responsible for following all laws and GitHub's policies, and are prohibited from harming other users, infringing anyone's intellectual property, misusing personal information, or using GitHub to support malware or attacks. GitHub has full discretion to suspend or terminate your account or remove your content for policy violations, and can also delete repositories or throttle your access if your usage strains its infrastructure.
GitHub's Acceptable Use Policies establish a framework of affirmative user obligations and platform enforcement powers governing conduct on the Service. Users bear responsibility for compliance with all applicable laws, regulations, and GitHub's policies, and are prohibited from a defined set of conduct including: activity that significantly harms other users, content or activity that infringes proprietary rights of any party, misuse of personal information, third-party privacy violations, reproduction or exploitation of the Service without express written permission, unlawful content or promotion of unlawful activities, and content directly supporting active malware or attack campaigns causing technical harm. GitHub reserves full discretion to respond to policy violations through account suspension, account termination, or content removal, and may also suspend accounts or throttle file hosting for significantly excessive bandwidth usage or delete repositories determined to place undue strain on infrastructure after advance notice. Any person, entity, or service collecting data from the Service is bound by GitHub's Privacy Statement with respect to personal information.
As a GitHub user, you are personally responsible for ensuring your activity complies with all laws and GitHub's policies — the document places that burden on you, not on GitHub. Your account can be suspended or terminated, and your content can be removed, at GitHub's full discretion if it determines you have violated its policies; no graduated process is guaranteed. If your bandwidth usage is determined to be significantly excessive compared to similar users, your account may be suspended or your file hosting throttled. If you store repositories, GitHub may delete them after advance notice if it determines they place undue strain on its infrastructure — that advance notice is your window to back up or migrate your data before any deletion occurs.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“Any person, entity, or service collecting data from the Service must comply with the GitHub Privacy Statement, particularly in regards to the collection of personal information.”
“We also reserve the right—after providing advance notice—to delete repositories that we determine to be placing undue strain on our infrastructure.”
“If we determine your bandwidth usage to be significantly excessive in relation to other users of similar features, we reserve the right to suspend your Account, throttle your file hosting...”
“GitHub retains full discretion to take action in response to a violation of these policies, including account suspension, account termination, or removal of content.”
“You must not engage in activity that significantly harms other users.”
“infringes any proprietary right of any party, including patent, trademark, trade secret, copyright, right of publicity, or other right”
“Misuse of personal information is prohibited.”
“violates the privacy of any third party, such as by posting another person's personal information without consent”
“You will not reproduce, duplicate, copy, sell, resell or exploit any portion of the Service, use of the Service, or access to the Service without our express written permission.”
“directly supports unlawful active attack or malware campaigns that are causing technical harms — such as using our platform to deliver malicious executables or as attack infrastructure...”
“We do not allow content or activity on GitHub that: is unlawful or promotes unlawful activities”
“You are responsible for using the Service in compliance with all applicable laws, regulations, and all of our Acceptable Use Policies.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Data collectors must comply with Privacy Statement and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.