Free Information law Templates

The GitHub General Privacy Statement explains how GitHub (and GitHub B.V.) collects, uses, shares, and protects personal data across its services, including users’ rights (GDPR/US state laws), data transfers, cookies, and security/retention practices. It is an official GitHub policy (under Microsoft) that references concrete compliance frameworks like the EU Standard Contractual Clauses and the Data Privacy Framework, making it a reliable source for understanding GitHub’s privacy posture.

The GitHub Bug Bounty Program Legal Safe Harbor sets out legal protections for security researchers who act in good faith when reporting vulnerabilities through GitHub’s bug bounty program, ensuring their work is treated as “authorized” under laws like the CFAA and DMCA. It is part of GitHub’s official security policies, providing researchers confidence and trust that responsible disclosure will not expose them to legal consequences when complying with program rules.

The GitHub Trademark Policy outlines how GitHub addresses misuse of company names, logos, or other trademarked materials that may mislead or confuse users. It provides clear procedures for trademark holders to report violations and ensures enforcement actions are taken only when backed by valid federal or international trademark registrations, making it a reliable and trusted policy framework.

The GitHub Threats of Violence and Gratuitously Violent Content Policy prohibits organizing, inciting, or glorifying violence on the platform, while allowing limited use in educational, documentary, or historical contexts with disclaimers. It is part of GitHub’s official Acceptable Use Policies, ensuring enforceable standards across its developer community.

The GitHub Sexually Obscene Content Policy bans pornographic, sexually exploitative, and non-consensual intimate material, including depictions of sexual acts, especially involving minors. While GitHub recognises exceptions for artistic, educational, historical, journalistic, or victim advocacy contexts, such content may be restricted or placed behind opt-in warnings to protect users.

The GitHub Active Malware or Exploits Policy prohibits the use of GitHub’s platform to deliver malware or facilitate unlawful attacks that cause technical harm, while still allowing dual-use content for legitimate security research and educational purposes. Maintained by GitHub as part of its Acceptable Use Policies, it balances protecting the community against abuse with supporting open security research and responsible disclosure practices.

The GitHub Subprocessors Policy identifies the third-party vendors GitHub authorizes to process customer and personal data on its behalf under the GitHub Data Protection Agreement. Maintained and published by GitHub, this list ensures GDPR compliance and transparency by providing at least 30 days’ notice before adding new subprocessors.

The GitHub DMCA Takedown Policy outlines GitHub’s notice-and-takedown process for copyright infringement claims, providing a clear framework for submitting DMCA notices, counter notices, and handling circumvention claims. It is part of GitHub’s official legal and compliance policies, making it a reliable and widely trusted resource for rights-holders and developers navigating copyright issues.

The GitHub Guidelines for Legal Requests of User Data explain the circumstances under which GitHub may disclose user information to law enforcement, requiring valid legal process such as subpoenas, court orders, or search warrants, with a strong emphasis on user notification and privacy protections. As an official GitHub policy, it provides transparent, authoritative guidance balancing user trust with lawful investigative needs, and can be relied upon for understanding GitHub’s data disclosure practices.

The GitHub Username Policy sets the rules for selecting and using GitHub account names, clarifying that usernames are assigned on a first-come, first-served basis and must be used actively, with prohibitions on squatting or trading names. It is an official GitHub policy, backed by trademark protections and enforcement measures, making it a trusted standard for account identity management.