GitHub · GitHub Privacy Statement

Children's Privacy — Minimum Age Restriction

Medium severity
Share 𝕏 Share in Share 🔒 PDF

What it is

GitHub does not allow children under 13 to use its services and will delete any data it discovers was collected from a child under 13.

Clause Stability Highly Volatile

1
Change
1
Month Monitored
Apr 27, 2026
First Seen
Apr 27, 2026
Last Seen
This clause has changed once in 1 month of monitoring.

Change history

modified Apr 28, 2026

Previous version had no excerpt; current version adds specific contact mechanism and deletion commitment for unauthorized child data collection.

View full change record →

Consumer impact (what this means for users)

Children under 13 are prohibited from creating GitHub accounts, and any personal data inadvertently collected from a minor under 13 will be deleted — but GitHub has no stated active verification mechanism to prevent underage registration.

Cross-platform context

See how other platforms handle Children's Privacy — Minimum Age Restriction and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Given the open and collaborative nature of GitHub where many users participate in public repositories, the risk of underage users accessing the platform without verification is real, and parents should be aware of this age restriction.

View original clause language
Our services are not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. If you learn that a child has provided us with personal information without parental consent, please contact us. If we learn that we have collected personal information from a child under 13, we will take steps to delete such information as soon as possible.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: COPPA (15 U.S.C. §6501 et seq.; 16 C.F.R. Part 312) requires verifiable parental consent prior to collecting personal information from children under 13 in the US; GDPR Art. 8 sets age of digital consent at 16 (or lower if member states specify, minimum 13) for information society services; UK GDPR and ICO Age Appropriate Design Code (Children's Code) impose additional obligations for services likely accessed by under-18s.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    FTC enforces COPPA (16 C.F.R. Part 312) regarding collection of personal data from children under 13 without verifiable parental consent.
    File a complaint →
  • Doe
    Where GitHub is used in educational settings, the Department of Education enforces FERPA protections for student records and privacy.
    File a complaint →

Provision details

Document information
Document
GitHub Privacy Statement
Entity
GitHub
Document last updated
April 29, 2026
Tracking information
First tracked
April 27, 2026
Last verified
April 27, 2026
Record ID
CA-P-003599
Document ID
CA-D-00254
Evidence Provenance
Source URL
Wayback Machine
SHA-256
6b5f0a9a524d3261cfe25f12abc65ee86bfcca11dcb979d0a2c6fa30d7aa36e8
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: GitHub | Document: GitHub Privacy Statement | Record: CA-P-003599
Captured: 2026-04-27 14:59:43 UTC | SHA-256: 6b5f0a9a524d3261…
URL: https://conductatlas.com/platform/github/github-privacy-statement/childrens-privacy-minimum-age-restriction/
Accessed: May 2, 2026
Classification
Severity
Medium
Categories

Other provisions in this document