GitHub · GitHub Privacy Statement

California Resident Rights (CCPA/CPRA)

Medium severity
Share 𝕏 Share in Share

Why it matters

California users have stronger legal protections than most US users, including the ability to stop GitHub from sharing their data with third parties for cross-context behavioral advertising.

Consumer impact

GitHub collects a broad range of personal data including your account information, browsing behavior, code contributions, and payment details, which may be shared with Microsoft affiliates, third-party service providers, and disclosed in response to legal requests. Your data may also be used to train AI and machine learning models, including features like GitHub Copilot, which has significant implications for developers who store proprietary or sensitive code on the platform. You can opt out of AI training data use and manage your privacy preferences through your GitHub account settings at https://github.com/settings/privacy.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    California residents can submit a CCPA/CPRA rights request by emailing privacy@github.com, stating you are a California resident and specifying the right you wish to exercise (access, deletion, opt-out of sale/sharing, or limit sensitive data use).

Applicable agencies

  • State AG
    The California Attorney General enforces CCPA/CPRA and can receive complaints from California residents regarding violations of their privacy rights.
    File a complaint →

Provision details

Document information
Document
GitHub Privacy Statement
Entity
GitHub
Document last updated
March 24, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-001348
Document ID
CA-D-00254
Evidence Provenance
Source URL
Wayback Machine
SHA-256
6ffd0bca7ee8ec2746c4351f0452b4941b4e2157175f395ff9607b70d0463c07
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: GitHub | Document: GitHub Privacy Statement | Record: CA-P-001348
Captured: 2026-03-20 12:20:26 UTC | SHA-256: 6ffd0bca7ee8ec27…
URL: https://conductatlas.com/platform/github/github-privacy-statement/california-resident-rights-ccpacpra/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document