Sourcegraph automatically records your IP address, browser details, repository names you access, and other technical data in server logs, and retains access audit logs including what data you accessed for security incident investigation.
This analysis describes what Sourcegraph Cody's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes collection of repository names and data accessed as part of audit logging, meaning records of which code repositories you interact with may be retained and shared with customers in the event of a security incident.
Sourcegraph's log data collection includes repository names, user IDs, IP addresses, and records of data accessed. The policy states access audit log information is retained only for security purposes and shared only with relevant customers in the event of a security incident.
How other platforms handle this
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
to request that your data be transferred to a third party (data portability)
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"As with most websites and technology services delivered over the internet, when you access or use our Services, our servers automatically collect data and record it in log files. This log data may include your web request, IP address, browser type and settings, date and time of use, information about browser configuration, error data, repository name, user ID, and cookie data. When you visit or use our Services, we may collect information related to accessing systems and data, including IP addresses, usernames, and data accessed. This information is only retained for the purposes of identifying, analyzing, and resolving potential security incidents.Excerpt from Sourcegraph Cody's Sourcegraph Privacy Policy
1) REGULATORY LANDSCAPE: Collection of IP addresses and persistent identifiers engages GDPR personal data definitions and CCPA categories of personal information.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes collection of repository names and data accessed as part of audit logging, meaning records of which code repositories you interact with may be retained and shared with customers in the event of a security incident.
Sourcegraph's log data collection includes repository names, user IDs, IP addresses, and records of data accessed. The policy states access audit log information is retained only for security purposes and shared only with relevant customers in the event of a security incident.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Sourcegraph Cody.