8. GitHub Cookies
Updated 17 October 2025
This document outlines GitHub's use of cookies, detailing their purpose, function, and expiration. It explains how GitHub and various third-party providers utilize cookies to secure websites, analyze usage, and enhance user experience, while also linking to their Privacy Statement for more information and cookie preference management.
GitHub Cookies
GitHub uses cookies to provide and secure our websites, as well as to analyze the usage of our websites, in order to offer you a great user experience. Please take a look at our Privacy Statement if you’d like more information about cookies, and on how and why we use them.
You can view the current list of cookies on GitHub, and sign up to receive cookie list updates, at https://github.com/privacy/cookies.
If you have questions or concerns about a new subprocessor, please contact us via Privacy contact form.
Cookies
GitHub provides a great deal of transparency regarding how we use your data, how we collect your data, and with whom we share your data. To that end, we provide this page which details how we use cookies.
GitHub uses cookies to provide and secure our websites, as well as to analyze the usage of our websites, in order to offer you a great user experience. Please take a look at our Privacy Statement if you’d like more information about cookies, and on how and why we use them and cookie-related personal data. You can change your preference about non-essential cookies at any time by following these instructions.
Since the number and names of cookies may change, the table below may be updated from time to time. When it is updated, the data of the repo will change. Follow these instructions to subscribe to changes in this repo.
Provider of Cookie | Cookie Name | Description | Expiration* |
GitHub | app_manifest_token | This cookie is used during the App Manifest flow to maintain the state of the flow during the redirect to fetch a user session. | Five minutes |
GitHub | color_mode | This cookie is used to indicate the user selected theme preference. | Session |
GitHub | deviceid | This cookie is used to track recognized devices for security purposes. | One year |
GitHub | dotcom_user | This cookie is used to signal to us that the user is already logged in. | One year |
GitHub | enterprise_trial_redirect_to | This cookie is used to complete a redirect for trial users | 5 minutes |
GitHub | fileTreeExpanded | Used to indicate whether the file tree on the code view was last expanded or collapsed | 30 days |
GitHub | ghcc | This cookie validates user's choice about cookies | 180 Days |
GitHub | ghent | This cookie is used for temporary application and framework state between pages like what step the customer is on in a multiple step form. | Two weeks |
GitHub | ghsess | This cookie is used for temporary application and framework state between pages like what step the user is on in a multiple step form. | Session |
GitHub | gist_oauth_csrf | This cookie is set by Gist to ensure the user that started the oauth flow is the same user that completes it. | Deleted when oauth state is validated |
GitHub | gist_user_session | This cookie is used by Gist when running on a separate host. | Two weeks |
GitHub | has_recent_activity | This cookie is used to prevent showing the security interstitial to users that have visited the app recently. | One hour |
GitHub | __Host-gist_user_session_same_site | This cookie is set to ensure that browsers that support SameSite cookies can check to see if a request originates from GitHub. | Two weeks |
GitHub | __Host-user_session_same_site | This cookie is set to ensure that browsers that support SameSite cookies can check to see if a request originates from GitHub. | Two weeks |
GitHub | logged_in | This cookie is used to signal to us that the user is already logged in. | One year |
GitHub | marketplace_repository_ids | This cookie is used for the marketplace installation flow. | One hour |
GitHub | marketplace_suggested_target_id | This cookie is used for the marketplace installation flow. | One hour |
GitHub | _octo | This cookie is used for session management including caching of dynamic content, conditional feature access, support request metadata, and first party analytics. | One year |
GitHub | org_transform_notice | This cookie is used to provide notice during organization transforms. | One hour |
GitHub | private_mode_user_session | This cookie is used for Enterprise authentication requests. | Two weeks |
GitHub | saml_csrf_token | This cookie is set by SAML auth path method to associate a token with the client. | Until user closes browser or completes authentication request |
GitHub | saml_csrf_token_legacy | This cookie is set by SAML auth path method to associate a token with the client. | Until user closes browser or completes authentication request |
GitHub | saml_return_to | This cookie is set by the SAML auth path method to maintain state during the SAML authentication loop. | Until user closes browser or completes authentication request |
GitHub | saml_return_to_legacy | This cookie is set by the SAML auth path method to maintain state during the SAML authentication loop. | Until user closes browser or completes authentication request |
GitHub | show_cookie_banner | Set based on the client’s region and used to determine if a cookie consent banner should be shown | Session |
GitHub | tz | This cookie allows us to customize timestamps to your time zone. | Session |
GitHub | user_session | This cookie is used to log you in. | Two weeks |
ai_session | Application Insights session ID | One year | |
ai_user | Application Insights user ID | 30 minutes | |
ANONCHK | This Microsoft Clarity cookie monitors website performance | One year | |
isFirstSession | This cookie is used when user opts-in to saving information | Session | |
MSO | This cookie identifies a session | One year | |
MC1 | This cookie is used for advertising, site analytics, and other operational purposes | One year | |
MR | This cookie checks whether to extend the lifetime of the MUID cookie | One year | |
MSFPC | This cookie is used for advertising, site analytics, and other operational purposes | One year | |
MUID | This cookie stores Bing’s visitor ID. This cookie is used for advertising, site analytics, and other operational purposes | 13 months | |
SM | This cookie is used in synchronizing the MUID across Microsoft domains. | Session | |
_uetsid | This cookie is used for analytics to store and track visits across sites | One year | |
_uetvid | This cookie is used by Bing Ads to store and track visits across websites | 13 months | |
X-FD-FEATURES | This cookie is used for tracking analytics and evenly spreading load on the website | One year | |
X-FD-Time | This cookie is used for tracking analytics and evenly spreading load on website | One year | |
aam_uuid | This cookie is an audience manager | 13 months | |
mboxEdgeCluster | This cookie is used by Adobe Target load balancer. Adobe Target is used to determine which targeted content to display to visitor | 13 months | |
AMCV_EA76ADE95776D2EC7F000101%40AdobeOrg | Adobe cookie used to track and analyze user activities on the website | 13 months | |
AMCVS_EA76ADE95776D2EC7F000101%40AdobeOrg | Adobe cookie used to track and analyze user activities on the website | Session | |
at_check | Adobe Target to support conversion tracking for new product customers | Session | |
mbox | Adobe Target to store session ID | 13 months | |
csc | Consent state: digit between 0 and 3. Used for capturing analytics on web pages | 13 months | |
cscvars | This cookie is used to capture analytics on the web page | Session | |
csid | Contains: user ID, timestamp (in seconds) of user creation, number of visits for this user | 13 months | |
css | Number of page views for the current session, and the recording state | One year | |
__CT_Data | This cookie is used to count the number of a guest’s pageviews or visits | One year | |
CTRS_ | This cookie is used to capture analytics on the web page | One year | |
WRUID | This cookie is used for analytics | One year | |
_fbc | This cookie is used to personalize content (including ads), measure ads, produce analytics, and provide a safer experience. | 90 Days | |
_fbp | This cookie is used to personalize content (including ads), measure ads, produce analytics, and provide a safer experience. | 90 Days | |
fr | This cookie is used as the primary advertising cookie used to deliver, measure, and improve the relevancy of ads. | 90 Days | |
wd | This cookie is used to deliver an optimal experience for your device’s screen. | 7 Days | |
oo | This cookie is an opt out cookie set by a user visiting Digital Advertising Alliance and choosing to opt out. | 5 years | |
fs_uid | This cookie is used to track interactions with a page | One year | |
gclau | This cookie is used by Google AdSense for experimenting with advertisement efficiency across websites using their services. | 90 Days | |
id | This cookie is used to build a profile of the website visitor's interests and show relevant ads on other sites. | "OPT_OUT: fixed expiration (year 2030/11/09); non-OPT_OUT: 13 months EEA UK 24 months elsewhere" | |
IDE | This cookie is used to build a profile of the website visitor's interests and show relevant ads on other sites. | "13 months EEA UK; 24 months elsewhere" | |
lsid | This cookie is used to provide information about how the end user uses the website and any advertising that the end user may have seen before visiting the website. | 90 Days | |
NID | This cookie is used to build a profile of the website visitor's interests and show relevant ads on other sites. | 90 Days | |
PREF | This cookie is used to build a profile of the website visitor's interests and show relevant ads on other sites. | 90 Days | |
SSID | This cookie is used to provide information about how the end user uses the website and any advertising that the end user may have seen before visiting the website. | 90 Days | |
SAPISID | This cookie is used to build a profile of the website visitor's interests and show relevant ads on other sites. | 90 Days | |
test_cookie | This cookie is used to determine if the website visitor's browser supports cookies. | 90 Days | |
bcookie | This cookie is a browser identifier cookie to uniquely identify devices accessing LinkedIn to detect abuse on the platform. | One year | |
bscookie | This cookie is used for remembering that a logged in user is verified by two factor authentication. | One year | |
u | This cookie is used to provide a platform to enable advertisers to track users across multiple devices. | 3 months | |
UserMatchHistory | This cookie is used to track visitors so that more relevant ads can be presented based on the visitor's preferences. | One month | |
JSESSIONID | This cookie is used for Cross Site Request Forgery (CSRF) protection. | Session | |
lang | This cookie is used to remember a user's language setting to ensure LinkedIn.com displays in the language selected by the user in their settings. | Session | |
lidc | This cookie is used to faciliatate data center selection | 24 hours | |
sdsc | This cookie is used for database routing to ensure consistency across all databases when a change is made and to ensure that user-inputted content is immediately available to the submitting user upon submission. | Session | |
li_gc | This cookie is used to store consent of visitors regarding the use of cookies for non-essential purposes. | 6 months | |
li_mc | This cookie is used as a temporary cache to avoid database lookups for a member's consent for use of non-essential cookies and used for having consent information on the client side to enforce consent on the client side. | 6 months | |
AnalyticsSyncHistory | This cookie is used to store information about the time a sync took place with the lms_analytics cookie. | 30 Days | |
lms_ads | This cookie is used to identify LinkedIn Members off LinkedIn for advertising. | 30 Days | |
lms_analytics | This cookie is used to identify LinkedIn Members off LinkedIn for analytics. | 30 Days | |
li_fat_id | This cookie is used for conversion tracking, retargeting, analytics. | 30 Days | |
li_sugr | This cookie is used to make a probabilistic match of a user's identity. | 90 Days | |
U | This cookie is used as a browser identifier. | 3 months | |
BizographicsOptOutBizographicsOptOut | This cookie is used to determine opt-out status for non-members. | 10 years | |
li_giant | This cookie is used for conversion tracking. | 7 Days | |
cref | This cookie is used for Market and Audience Segmentation and Targeted advertising services. | 13 months | |
d | This cookie is used for Market and Audience Segmentation and Targeted advertising services. | 3 months | |
mc | This cookie is used to track anonymous information about how website visitors use the site. | 13 months | |
A3 | This cookie is used for search and advertising. | One year | |
b | This cookie collects anonymous data related to the visitor's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The registered data is used to categorize the users' interest and demographical profiles with the purpose of customizing the website content depending on the visitor. | One year |
(*) The expiration dates for the cookies listed above generally apply on a rolling basis.
About this template
What is this template?
8. GitHub Cookies is a free, ready-to-use Commercial law template you can open, customize, and download on GitLaw. It gives you a professionally structured starting point, so you never have to draft from a blank page. The wording is plain and modern, organized into clear sections that are easy to read, edit, and adapt to your own situation before you share or sign it.
When should you use it?
Reach for this Commercial law template whenever you need a reliable agreement quickly and want to be sure the essentials are covered. It suits individuals, freelancers, startups, and established businesses alike. Instead of paying for a document drafted from scratch, you can start here, tailor the details to your arrangement, and have a polished draft ready in minutes. This version is drafted with England & Wales and European Union in mind, though you should always review the final wording against the laws that apply to you.
What's typically included?
A well-drafted Commercial law usually sets out the parties involved, the scope of the agreement, and each side's rights and responsibilities. Expect sections covering key terms and definitions, how long the agreement lasts, how it can be ended, and what happens if something goes wrong. This template brings those building blocks together in a sensible order, so you can focus on the specifics rather than worrying about what to include. Open it to read the full document, then sign up to edit, negotiate, and e-sign it directly in GitLaw.