48 Total
29 High severity
15 Medium severity
4 Low severity

Key Facts

What must any person, entity, or service collecting data from the Service comply with?
GitHub requires any person, entity, or service collecting data from the Service to comply with the GitHub Privacy Statement, particularly regarding the collection of personal information.
What does GitHub reserve the right to do after providing advance notice?
GitHub reserves the right, after providing advance notice, to delete repositories it determines to be placing undue strain on its infrastructure.
Can GitHub delete repositories it determines to be placing undue strain on its infrastructure?
GitHub reserves the right, after providing advance notice, to delete repositories it determines to be placing undue strain on its infrastructure.
What does GitHub reserve the right to do if bandwidth usage is significantly excessive?
GitHub reserves the right to suspend a user's Account or throttle file hosting if it determines the user's bandwidth usage is significantly excessive in relation to other users of similar features.
Can GitHub suspend a user's Account or throttle file hosting?
GitHub reserves the right to suspend a user's Account or throttle file hosting if it determines the user's bandwidth usage is significantly excessive in relation to other users of similar features.
What does GitHub retain full discretion to do?
GitHub retains full discretion to take action in response to a violation of these policies, including account suspension, account termination, or removal of content.
What does GitHub prohibit users from engaging in?
GitHub prohibits users from engaging in activity that significantly harms other users.
Does GitHub prohibit activity that significantly harms other users?
GitHub prohibits users from engaging in activity that significantly harms other users.
What does GitHub prohibit regarding proprietary rights?
GitHub prohibits content or activity that infringes any proprietary right of any party, including patent, trademark, trade secret, copyright, right of publicity, or other rights.
Does GitHub prohibit content or activity that infringes proprietary rights?
GitHub prohibits content or activity that infringes any proprietary right of any party, including patent, trademark, trade secret, copyright, right of publicity, or other rights.
Stay ahead of the changes
Track GitHub and get the diff the day its terms change.
Summary

This document sets the rules for what users can and cannot do on GitHub, and explains what GitHub can do if those rules are broken. You are responsible for following all laws and GitHub's policies, and are prohibited from harming other users, infringing anyone's intellectual property, misusing personal information, or using GitHub to support malware or attacks. GitHub has full discretion to suspend or terminate your account or remove your content for policy violations, and can also delete repositories or throttle your access if your usage strains its infrastructure.

Analysis

GitHub's Acceptable Use Policies establish a framework of affirmative user obligations and platform enforcement powers governing conduct on the Service. Users bear responsibility for compliance with all applicable laws, regulations, and GitHub's policies, and are prohibited from a defined set of conduct including: activity that significantly harms other users, content or activity that infringes proprietary rights of any party, misuse of personal information, third-party privacy violations, reproduction or exploitation of the Service without express written permission, unlawful content or promotion of unlawful activities, and content directly supporting active malware or attack campaigns causing technical harm. GitHub reserves full discretion to respond to policy violations through account suspension, account termination, or content removal, and may also suspend accounts or throttle file hosting for significantly excessive bandwidth usage or delete repositories determined to place undue strain on infrastructure after advance notice. Any person, entity, or service collecting data from the Service is bound by GitHub's Privacy Statement with respect to personal information.

What this means for you

As a GitHub user, you are personally responsible for ensuring your activity complies with all laws and GitHub's policies — the document places that burden on you, not on GitHub. Your account can be suspended or terminated, and your content can be removed, at GitHub's full discretion if it determines you have violated its policies; no graduated process is guaranteed. If your bandwidth usage is determined to be significantly excessive compared to similar users, your account may be suspended or your file hosting throttled. If you store repositories, GitHub may delete them after advance notice if it determines they place undue strain on its infrastructure — that advance notice is your window to back up or migrate your data before any deletion occurs.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Featured, High severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

48 provisions
12 featured
12 clause types
29 high severity
Intellectual Property 1 1 high
Policy Changes 1
Stay ahead of the changes

Monitoring

GitHub has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Data collectors must comply with Privacy Statement and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
CFAA
United States Federal
View official text ↗
DMCA
United States Federal
View official text ↗
DSA
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured July 16, 2026 00:42 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000790
Version ID CA-V-004941
SHA-256 f3a7fa67a782fd13fb284d5bf113df41b64c609ed46f8392d267bc054196a2a2
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans