GitHub uses cookies and tracking pixels to monitor your activity on the site and to show you targeted ads, and it shares this tracking data with third-party advertising partners.
This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause establishes the operational mechanism through which GitHub collects behavioral data for both service functionality and advertising purposes, and defines the scope of data sharing with external analytics and ad technology vendors. This authorization applies across GitHub properties and third-party websites where tracking partners operate.
The updated terms now explicitly authorize GitHub to collect AI outputs generated within the platform alongside user-provided code and content, and to share personal data with Microsoft and other GitHub affiliates for purposes including training and improving artificial intelligence and machine learning technologies. The privacy statement indicates that aggregate and de-identified data will be used where feasible, but the updated language establishes broader authority for affiliate data sharing and AI model development than the previous version stated. The revised terms also remove specific disclosure of the conditions under which GitHub personnel may access private repositories, replacing that detail with a cross-reference to the Terms of Service, which means the scope of internal GitHub access to private repositories is now defined in a separate contract document rather than the privacy statement itself.
View change record →Third-party advertising partners can track your activity across GitHub and other websites using cookies and pixels, building a behavioral profile used for targeted advertising — data you did not explicitly consent to share with advertisers.
How other platforms handle this
Cookies are small data files that are commonly stored on your device when you access websites and online services. The text in a cookie contains a string of numbers and letters that may uniquely identify a device and can contain other information as well. This allows the web server to recognize your...
We and our third-party partners may use cookies, web beacons, pixel tags, and other tracking technologies to collect information about your use of our website and apps, including your browsing activity, device type, IP address, and referring URLs. We use this information to personalize your experien...
Information from cookies and similar technologies. See our Cookies Policy for more information. Information we receive from our marketing partners, including in some instances what marketing content you viewed or the actions you take on and off our Sites and Apps, to better understand your preferenc...
Monitoring
GitHub has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We use cookies and similar tracking technologies (such as web beacons and pixels) to operate and provide our services, track your activity on GitHub, and deliver advertising. We may work with third-party analytics and advertising partners who use these technologies to collect information about your use of our services over time and across other websites and applications to deliver interest-based advertisements. You can control the use of cookies through your browser settings and our cookie preferences.— Excerpt from GitHub's GitHub Privacy Statement
REGULATORY FRAMEWORK: This provision implicates GDPR Art. 6(1)(a) (consent required for non-essential cookies under ePrivacy Directive 2002/58/EC as amended), CCPA/CPRA §1798.120 (right to opt out of sale/sharing of personal information including via cookies), IAB TCF 2.2 framework compliance requirements, and FTC Act Section 5 regarding deceptive tracking disclosures.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The clause establishes the operational mechanism through which GitHub collects behavioral data for both service functionality and advertising purposes, and defines the scope of data sharing with external analytics and ad technology vendors. This authorization applies across GitHub properties and third-party websites where tracking partners operate.
Third-party advertising partners can track your activity across GitHub and other websites using cookies and pixels, building a behavioral profile used for targeted advertising — data you did not explicitly consent to share with advertisers.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.