Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Privacy Statement Updates September 2022#582

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
site-policy-bot merged 2 commits intomainfromprivacy-statement-update-sep-2022
Sep 1, 2022

Conversation

ghost
Copy link

@ghostghost commentedAug 2, 2022
edited by ghost
Loading

GitHub is introducing non-essential cookies on web pages that market our products to businesses. These cookies will provide analytics to improve the site experience and personalize content and ads for enterprise users. This change is only on subdomains, likeresources.github.com, where GitHub markets products and services to enterprise customers.Github.com will continue to operate as-is.

This change updates the Privacy Statement based on this new activity.

These updates will go into effect after the 30-day notice and comment period, on September 1, 2022.

Seecomment below with clarifications and changes made at the end of the comment period.
Comment on #582 Privacy Statement Updates September 2022
We want to thank everyone for their review and feedback on the Privacy Statement Update. We appreciate and share your passion for developer privacy. GitHub remains committed to having the highest privacy standards and will continue to center the needs of developers in all of our platform decisions. We intend for this to be a minimally invasive change that will enable us to provide the best tools to our users. In response to your comments, we are providing the following changes and points of clarification:
DNT and self-help browser extensions
Commenters raised questions about our language on DNT and self-help browser extensions. We've pushed acommit that:
• Folds the existing DNT and browser extension information into a new section on disabling non-essential cookies.
• Specifies there will be a user setting to disable non-essential cookies and provides additional details to clarify which cookies will be used and for what reasons.
• Specifies that DNT will be honored on GitHub, and that if a DNT signal is sent, GitHub will not load third party resources which set non-essential cookies, so that we do not have to rely on third parties honoring DNT.
• Browsers' built-in tracking protection has advanced significantly in recent years, so we've noted that configuring that built-in protection may block non-essential cookies.
• Separated mentions of browser extensions designed to block tracking, and extensions designed to block unwanted content with the effect of blocking tracking, for clarity, though using either alone or in combination may block non-essential cookies.
• Changed links with additional information on DNT and browser extensions to point to their respective Wikipedia articles for neutrality, currency, and to clarify that these are not GitHub products (though of course we're proud that many privacy protection tools are developed on GitHub).
Finally, some have asked why we’re explaining technical self-help tools. GitHub has a very broad user base, including new developers – and we want everyone to be informed about the scope of their options, including technical options.
Enterprise user experience
Commenters asked for clarification about how this change will impact the enterprise user experience. We are introducing cookies on GitHub’s Enterprise Marketing Pages (e.g.resources.github.com), not on Enterprise user accounts. We intend for this change to make it easier for our Marketing team to better understand the needs of users who are visiting Enterprise Marketing Pages and connect them with the solutions that will benefit them most.
Users who visit these pages will have the option to express their cookies preferences by navigating to the link in the footer of the page.
Stylistic change
Commenters have asked why ‘Personal Data’ was changed to ‘personal data’ in the Privacy Statement update. We made personal data lowercase because it is not a defined term in our Terms of Service, for consistency with “All capitalized terms have their definition inGitHub’s Terms of Service, unless otherwise noted here.” The stylistic change does not impact its definition.

jacamera, kpennell, Marcisbee, SwatDoge, whiztech, ElianCodes, nikolaymatrosov, mrschwartx, AmariHana, wopian, and 75 more reacted with thumbs up emojikrystian3w, ivaluexrays, Hsn723, reilly3000, itzzexcel, diksown, fhlemes, futursolo, FlorianWendelborn, shoenig, and 1700 more reacted with thumbs down emojiSwatDoge, flymedllva, keenwon, jessedoka, NLTD2010, LyeZinho, luism3861, surya-kasturi-lb, ZelphirKaltstahl, zongruxie4, and 11 more reacted with laugh emojishankarlol, jessedoka, fsvehla, itpropro, Varun270, ericbarrionuevo, ims2012035, naserykarim922, ma99R, JanaAhurtsova, and ikhtearalamshawonmollah54321 reacted with hooray emojileoheck, JJTech0130, william-herring, tylerjw, TheMaverickProgrammer, sigaloid, afkvido, MarcusGoldschmidt, BlazeIsClone, RoyTinker, and 179 more reacted with confused emojirenancaraujo, josemoises2007, bodeboushi12, euclidesdry, 8xu, ims2012035, naserykarim922, ma99R, guero0109, and JanaAhurtsova reacted with heart emojiIvanov-Anton, jessedoka, xFluffyke, itpropro, ims2012035, Natee9969, naserykarim922, ma99R, JanaAhurtsova, and ikhtearalamshawonmollah54321 reacted with rocket emojipabloazurduy, kinow, jrmsjorgesilva, afkvido, arderyp, cpeterso, tulios, mau-seifert, genkoph, NNBnh, and 46 more reacted with eyes emoji
Updates to privacy statement
@ghostghost changed the titleUpdate github-privacy-statement.mdPrivacy Statement Updates September 2022Aug 2, 2022
@ghost ghost requested a review fromliteraryteaAugust 2, 2022 19:42
@@ -33,13 +34,13 @@ To see our Privacy Notice to residents of California, please go to [GitHub's Not

| Section| What can you find there?|
|---|---|
|[Who is responsible for the processing of your information](#who-is-responsible-for-the-processing-of-your-information)| Subject to limited exceptions, GitHub is the controller and entity responsible for the processing of your Personal Data in connection with the Website or Service.|
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Is the change from "Personal Data" to "personal data" a stylistic change?

I note that the paragraph above is still intact:

All capitalized terms have their definition inGitHub’s Terms of Service, unless otherwise noted here.

Presuming this capitalization change is unintentional, it has the unfortunate effect of decoupling "Personal Data" from the definition provided in the GitHub Terms of Service, which means that "personal data" is no longer as delineated there, but could well be anything.

If this is an intentional change, it would seem better made as a visible change to the Terms of Service. If the intent is not to change the Terms of Service but to arbitrarily expand "personal data" without drawing attention, well, that seems evil.

TotallyInformation, bashrc2, TheLastProject, RokeJulianLockhart, Eireen, akshaim, S1GGEN, ims2012035, UNINOIZE, ikhtearalamshawonmollah54321, and ma99R reacted with thumbs up emojiikhtearalamshawonmollah54321 and ma99R reacted with hooray emojiZaczero, TheDeveloper101, DimitarBogdanov, Rancunefr, adrian-enspired, chakravala, ycMia, Cking351, ims2012035, and ma99R reacted with confused emojiikhtearalamshawonmollah54321 and ma99R reacted with rocket emojiCyberFlameGO, kiwiroy, thexkey, TheMaverickProgrammer, queer, cedarkeith, jrmsjorgesilva, byronic, thomasingalls, cheshire137, and 81 more reacted with eyes emoji
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Looking into this further -- it looks like "Personal Data" is defined these days in theGitHub Data Protection Agreement. Perhaps this was being decapitalized since it is not directly defined (afaict) in the GitHub Terms of Service?

afkvido, adrian-enspired, RokeJulianLockhart, ims2012035, ikhtearalamshawonmollah54321, 050898056, ma99R, and guero0109 reacted with thumbs up emojiikhtearalamshawonmollah54321, ma99R, and guero0109 reacted with hooray emojiikhtearalamshawonmollah54321 and ma99R reacted with rocket emoji

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Oh bet

ikhtearalamshawonmollah54321 reacted with thumbs up emojiikhtearalamshawonmollah54321 and guero0109 reacted with hooray emojiikhtearalamshawonmollah54321 and masummohon0 reacted with rocket emojimasummohon0 reacted with eyes emoji

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

The collection of information and sale of it I think is something that has been going on for a long time. I think what matters is knowing what information we provide. But it's always good to know

RokeJulianLockhart, danger2520, utkarsh7213, 88629258, leelee855, and ikhtearalamshawonmollah54321 reacted with thumbs up emojiikhtearalamshawonmollah54321 reacted with hooray emojiikhtearalamshawonmollah54321 reacted with rocket emoji

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

salve cade os BR

Elizeu12270, ims2012035, and ma99R reacted with thumbs up emojiRokeJulianLockhart, agurgel-te, Golveira, marianasouzarodri, Elizeu12270, ims2012035, and ma99R reacted with confused emoji

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

in a court of law, doesn't "Personal Data" mean "personal data" ?

lol

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Soy mario sl papa si tubieron q ver en esta acciion demla boluntad arreglenlo o se veran en lios no agan mad difisil las cosas y agan l9 correcto

ikhtearalamshawonmollah54321 reacted with thumbs up emojiikhtearalamshawonmollah54321 reacted with hooray emojiikhtearalamshawonmollah54321 reacted with rocket emoji

Our emails to users may contain a pixel tag, which is a small, clear image that can tell us whether or not you have opened an email and what your IP address is. We use this pixel tag to make our email communications more effective and to make sure we are not sending you unwanted email.

###DNT

"[Do Not Track](https://www.eff.org/issues/do-not-track)" (DNT) is a privacy preference you can set in your browser if you do not want online services to collect and share certain kinds of information about your online activity from third party tracking services.GitHub respondsto browser DNT signals andfollows the[W3C standard for responding to DNT signals](https://www.w3.org/TR/tracking-dnt/). If you would like to set your browser to signal that you would not like to be tracked, please check your browser's documentation for how to enable that signal. There are also good applications that block online tracking, such as[Privacy Badger](https://privacybadger.org/).
"[Do Not Track](https://www.eff.org/issues/do-not-track)" (DNT) is a privacy preference you can set in your browser if you do not want online services to collect and share certain kinds of information about your online activity from third party tracking services.Some services may respondto browser DNT signals andfollow the[W3C standard for responding to DNT signals](https://www.w3.org/TR/tracking-dnt/). If you would like to set your browser to signal that you would not like to be tracked, please check your browser's documentation for how to enable that signal. There are also good applications that block online tracking, such as[Privacy Badger](https://privacybadger.org/) or[uBlock Origin](https://github.com/gorhill/uBlock/).

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Let me prefix this by stating that I am a complete layman.

Previously: *GitHub* responds to browser DNT signals and follows the W3C spec.
Now: Some random services, somewhere in the world, hosted by GitHub or somebody else *may* respond to browser DNT signals and follow the W3C spec.

Doesn't this change invalidate the whole paragraph and turns it into a generic wiki article?

MrBartusek, TheMaverickProgrammer, getaaron, jrockway, DoodlesEpic, tiansh, SkyLeite, afkvido, beaugunderson, ajacques, and 194 more reacted with thumbs up emojiikhtearalamshawonmollah54321 reacted with hooray emojiL3P3, bjornrud, kamulos, real-yfprojects, blizzz, vishaltomars, DimitarBogdanov, wschwab, bsedin, adrian-enspired, and 4 more reacted with heart emojiikhtearalamshawonmollah54321 reacted with rocket emojivishaltomars, DamianFekete, adrian-enspired, jacobrose, gresm, euclidesdry, and mdjunaeidislam reacted with eyes emoji

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Dunno, they will stop respecting DNT but leave this paragraph and make it seem as if they do. This is just confusing.

afkvido, guarilha, bdougherty, amomchilov, jmillerv, swadeley, gaael, SVendittelli, pravinxor, ZelphirKaltstahl, and 11 more reacted with thumbs up emojihen-x, kkirsche, vishaltomars, SkrudjReal, TarikViehmann, and ims2012035 reacted with thumbs down emojivishaltomars and ims2012035 reacted with laugh emojivishaltomars, ims2012035, and ikhtearalamshawonmollah54321 reacted with hooray emojivishaltomars, oscarhermoso, amomchilov, and ims2012035 reacted with confused emojivishaltomars, wschwab, rettichschnidi, and ims2012035 reacted with heart emojiikhtearalamshawonmollah54321 reacted with rocket emojimdjunaeidislam reacted with eyes emoji
Copy link

@ConsolatisConsolatisAug 3, 2022
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

"Confusing" is one way to put it.

Edit:
@zzo38 articulated my personal opinion better than I could so I'll quote part of theircomment here:

I also think that they should avoid using confusing privacy policies; the mention of DNT should either be kept as is if GitHub uses the DNT header to reduce tracking, or deleted entirely if GitHub does not use the DNT header. If it does so only in some cases,it should mention what cases these are. The privacy policy made sense before the change in the section about DNT, although the change mentioned above makes it confusing (as other comments already mention).

[..]

I have no problem with adding these non-essential cookies to the enterprise marketing pages, as long as the rest of GitHub can be used without itand it is documented which pages these are (and if the cookie domain is the same, also which cookies). Moving the enterprise marketing pages to a separate domain seems to me to be a good idea though, in order to be clearly distinguished (although a subdomain is probably good enough, in my opinion;as long as it is documented clearly which subdomains these are).

Emphasis are mine.
In my opinion,documented should mean being very specific and being part of a legally binding document like the privacy policy.

An example for not being specific is this part of the changes:

As described below, we may use non-essential cookies oncertain pages of our website

RokeJulianLockhart, BezBIS, gatlinnewhouse, Elman295, goyalyashpal, and UNINOIZE reacted with thumbs up emojiMrBartusek, SkyLeite, antn, karolba, gldraphael, not-matthias, RomainTHD, jwshields, kkirsche, ulfox, and 22 more reacted with laugh emojijacobrose and stancalau reacted with heart emoji

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

:))

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

So; let's get this straight:

  1. According to GDPR article 22 data subjects may exercise their right to object to processing using technical specifications.
  2. GitHub acknowledges the DNT signal as a valid technical standard, i.e. technical specification.
  3. Moreover; GitHub honors - or at least used to honor - that signal, illustrating that they have the capacity to respond to it appropriately.

Yeah... uhm..
How is attempting to weasel yourself out from under that not morally blackest evil?

lodo1995, CADawg, jacobrose, reinerh, stancalau, yogthos, gaael, AaronHebert, gatlinnewhouse, bryan-hoang, and 13 more reacted with thumbs up emojiRwarcards762, CADawg, ericksoa, and euclidesdry reacted with rocket emojiCADawg and Gerardojc reacted with eyes emoji

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

can someone please explain the policy's@github and what happened to@dontsellmydata?
asking for a friend

@jdgregson
Copy link

You lost me atads for enterprise users.

iam-py-test, stamminator, rizkyhaksono, FaircoreHD, askeer25, Madi-Ji, michaeldelago, LambdAurora, Asjas, bdougherty, and 61 more reacted with thumbs up emojiims2012035 and ma99R reacted with thumbs down emojiims2012035, ma99R, and FlorianWendelborn reacted with laugh emojiims2012035 and ma99R reacted with hooray emojiims2012035 and ma99R reacted with confused emojiims2012035 and ma99R reacted with heart emojileoheck, Cyb3r-Jak3, c3r0, Sunnnner, yanghanlin, jtraglia, TheMaverickProgrammer, trevorstenson, ZeroCool2u, pabloazurduy, and 139 more reacted with rocket emojiims2012035 and ma99R reacted with eyes emoji

@leoheck
Copy link

Github is being undermined by Microsoft.

ardrigh, darkbanjo, afkvido, mskelton, MarcusGoldschmidt, xCss, patstha, ariedro, karolba, povilaspetkevicius, and 171 more reacted with thumbs up emojievieluvsrainbows, cinnamondev, TreeBranches, mbifulco, itpropro, RokeJulianLockhart, ims2012035, zeina1991, and ma99R reacted with thumbs down emojijacobrose, ims2012035, and ma99R reacted with confused emojiafkvido, ims2012035, and ma99R reacted with rocket emoji

@TechSolomon
Copy link

🍪https://github.blog/2020-12-17-no-cookie-for-you/

yanghanlin, doamatto, william-herring, jtraglia, xplato, ocdtrekkie, byrnes, stepbrobd, andyferris, henriquebremenkanp, and 289 more reacted with thumbs up emojiRokeJulianLockhart, ims2012035, ma99R, and abosayedmusic reacted with thumbs down emojikubo6472, S1GGEN, ims2012035, and ma99R reacted with confused emojihtml5cat, cpl, kkirsche, arsam-sedighi, rodamaral, Rikj000, speller26, LumitoLuma, NeuronButter, wschwab, and 4 more reacted with rocket emojiflbn, MarcusGoldschmidt, shivajivarma, ZeroAurora, crankyadmin, DarkOnion0, just-max, krall12, arsam-sedighi, rodamaral, and 19 more reacted with eyes emoji

@TheMaverickProgrammer

so what github alternative is everyone using these days? asking for a friend.

ardrigh, afkvido, leoheck, dominikwilkowski, timvisee, wout, demonshreder, xcfrg, osmankorogluu, alimkoca, and 102 more reacted with thumbs up emojievieluvsrainbows, whiztech, TreeBranches, nowaythisworks, and NeuronButter reacted with thumbs down emojiuglow, leoheck, wout, Benj2005, powderedfish, IgorVolochay, maSchoeller, Jonikulov, Feridinha, onkoe, and 28 more reacted with laugh emojiariedro, wout, nothub, Feridinha, Rikj000, Risyandi, LumitoLuma, theRealProHacker, gin0115, devtooligan, and 13 more reacted with heart emojiRwarcards762 and afkvido reacted with rocket emoji

@ocdtrekkie
Copy link

ocdtrekkie commentedAug 3, 2022
edited
Loading

"We are also committing that going forward, we will only use cookies that are required for us to serve GitHub.com."

Apparently in corporate terms, a "commitment" is now less than two calendar years of obligation. Good to know. Though, I guess I don't visit the marketing pages and hence, don't really care that much? Corporations being untrustworthy isn't new territory.

Literally just "business advice": Your marketing teams should be weighing the value of the data here against the cost of "yet another breach of user trust and commitment", user trust, of course, being something extremely hard to earn back.

damien, consultutah, andyferris, jtraglia, queer, DoodlesEpic, sandro-fugro, flbn, icecreammatt, ardrigh, and 160 more reacted with thumbs up emojiRokeJulianLockhart and ma99R reacted with thumbs down emoji

@karlshea
Copy link

Marketing people don't care about user trust or commitments. They'll just burn things to the ground and move on to the next corp job, each time making the world a slightly worse place.

nclark, sandro-fugro, icecreammatt, ardrigh, slater, mskelton, patstha, RoyTinker, uglow, ariedro, and 115 more reacted with thumbs up emojigavinhenderson, RokeJulianLockhart, and michaelkuznetsov reacted with thumbs down emojiEwenQuim reacted with hooray emojijacobrose reacted with confused emojiUNINOIZE reacted with heart emoji

@afkvido
Copy link

This clearly shows that GitHub cares more about revenue than the user base behind it.

Microsoft fucking sucks, GitHub wasn't evil until Microsoft really started to abuse GitHub.

afkvido, MarcusGoldschmidt, patstha, ariedro, karolba, dseevr, dominikwilkowski, timvisee, wout, talgat-ruby, and 82 more reacted with thumbs up emojiCAFxX, evieluvsrainbows, whiztech, liamengland1, TreeBranches, nowaythisworks, crazychatting, Blaumaus, dszymon, wojpawlik, and 4 more reacted with thumbs down emojiariedro, JanJastrow, and ims2012035 reacted with confused emojiUNINOIZE reacted with heart emoji

@afkvido
Copy link

so what github alternative is everyone using these days? asking for a friend.

@TheMaverickProgrammerGitLab probbably.

afkvido, leoheck, shivamydv, just-max, xcfrg, DanielVenturini, otavio-silva, onkoe, crazychatting, sz55net, and 19 more reacted with thumbs up emojievieluvsrainbows, nothub, krall12, SincerelyFaust, ryuukk, coderinblack08, sanamhub, nowaythisworks, null2264, Vendicated, and 16 more reacted with thumbs down emojiariedro, just-max, DanielVenturini, Caiofcas, otavio-silva, afkvido, Rwarcards762, rettichschnidi, fuomag9, MariojGG, and 2 more reacted with heart emoji

Copy link

@afkvidoafkvido left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Requesting a change: Don't add this.

mskelton, thomasingalls, VitorLuizC, jtraglia, byronic, patstha, afkvido, mattburdumy, francisschmaltz, arderyp, and 223 more reacted with thumbs up emojievieluvsrainbows, dszymon, RokeJulianLockhart, and 0kku reacted with thumbs down emojiwout, Jack2104, fleroviux, DarkOnion0, gruselhaus, DanielVenturini, Rikj000, speller26, afkvido, LambdAurora, and 10 more reacted with heart emoji
@RoyTinker
Copy link

RoyTinker commentedAug 3, 2022
edited
Loading

I understand that cookies are helpful for analytics and gathering sales funnel data. It's always sad when companies don't keep prior promises, though 😟

If you must break the promise, here's my suggestion, for what it's worth: move enterprise marketing pages (maybe even all marketing pages besides the front page?) off ofgithub.com onto a separate domain. Maybegithub.info?

Then point marketing links from the front page to that domain.

This will allow folks to deal with that domain separately fromgithub.com.

afkvido, cheshire137, sarangj, leoheck, yanghanlin, dominikwilkowski, pgear-wd, timvisee, wout, borisceranic, and 69 more reacted with thumbs up emojiRokeJulianLockhart reacted with thumbs down emojisz55net reacted with confused emojiafkvido, leoheck, 1to5pc, freearhey, Rikj000, and adrian-enspired reacted with rocket emoji

@tylt6688
Copy link

tylt6688 commentedAug 3, 2022
edited
Loading

I personally feel that the enterprise version can be made independently.

afkvido, kaenova, wout, borisceranic, StanleyMasinde, RomainTHD, saulshanabrook, TheMaverickProgrammer, Risyandi, jeffersongandra, and 18 more reacted with thumbs up emojiRokeJulianLockhart, TarikViehmann, and ma99R reacted with thumbs down emojitylt6688, wfnian, and ma99R reacted with rocket emoji

@jacamera
Copy link

As a happy GitHub user I just hope all this recreational outrage doesn't result in GitHub allocating more time or resources than would otherwise be required to complete this change. Full speed ahead!

natario1, dszymon, binarydad, RokeJulianLockhart, and landsman reacted with thumbs up emojiThanaen, lopis, nothub, pankajthekush, Kl4rry, terrarier2111, TheMaverickProgrammer, SalomonSmeke, yannikbloscheck, bobaikato, and 78 more reacted with thumbs down emojiTeMPOraL, Serups, hckr, and UNINOIZE reacted with laugh emojiafkvido, TeMPOraL, and ItsIgnacioPortal reacted with confused emoji

@afkvido
Copy link

As a happy GitHub user I just hope all this recreational outrage doesn't result in GitHub allocating more time or resources than would otherwise be required to complete this change. Full speed ahead!

I'd want GitHub to remove Microsoft, then continue full speed ahead

afkvido, dominikwilkowski, StanleyMasinde, asieverding, DanielVenturini, jonm58, Rikj000, sz55net, nonperforming, speller26, and 42 more reacted with thumbs up emojievieluvsrainbows, whiztech, TreeBranches, nowaythisworks, Hunam6, dszymon, RokeJulianLockhart, and 0kku reacted with thumbs down emojiamytimed, afkvido, hukl, danielabrozzoni, rettichschnidi, chakravala, and UNINOIZE reacted with heart emoji

@evieluvsrainbows
Copy link

evieluvsrainbows commentedAug 3, 2022
edited
Loading

This change is only on subdomains where GitHub markets products and services to enterprise customers, and all other GitHub subdomains will continue to operate as-is.

Why are people getting so riled up when this changeonly impacts the Enterprise marketing subdomains? Makes no sense to me how this of all things is getting negative attention. Majority of people don't use GitHub Enterprise, as its only for businesses, And they're just cookies. Use uBlock Origin as it says if you really can't stand a few cookies on subdomains you'll probably never end up going to.

Also, people love pointing the finger at Microsoft, as if this change was demanded by them. It more than likely wasn't. There are always going to be changes that people don't like, but not all changes are influenced by the parent company. If Microsoft was puttng their hands all over GitHub, they probably would've moved GitHub to the Microsoft Policy Statement a long time ago.

jacamera, theolivenbaum, whiztech, lumaxis, PatheticMustan, lunaisnotaboy, 5HT2, SaifAqqad, cesarfigueroa, aphedges, and 27 more reacted with thumbs up emojiafkvido, doamatto, c0b41, nothub, talesaraujo, yannikbloscheck, rodrigoruan-osf, pankajthekush, Brawl345, nonperforming, and 56 more reacted with thumbs down emojiafkvido and maroehsushe37 reacted with confused emojiNochEinKamel, Rfc2026, and maroehsushe37 reacted with heart emojiNochEinKamel, shaikshafiulla, and maroehsushe37 reacted with rocket emoji

@afkvido
Copy link

Cuz GitHub said they wouldnt use cookies
daym its a borken promise

afkvido, dominikwilkowski, localcached, talesaraujo, naufik, rodrigoruan-osf, null2264, Rikj000, sz55net, jmeggitt, and 45 more reacted with thumbs up emojievieluvsrainbows, TheMaverickProgrammer, nowaythisworks, lunaisnotaboy, NochEinKamel, dszymon, RokeJulianLockhart, and 0kku reacted with thumbs down emoji

@evieluvsrainbows
Copy link

evieluvsrainbows commentedAug 3, 2022
edited
Loading

"We are also committing that going forward, we will only use cookies that are required for us to serve GitHub.com."

Apparently in corporate terms, a "commitment" is now less than two calendar years of obligation. Good to know. Though, I guess I don't visit the marketing pages and hence, don't really care that much? Corporations being untrustworthy isn't new territory.

Literally just "business advice": Your marketing teams should be weighing the value of the data here against the cost of "yet another breach of user trust and commitment", user trust, of course, being something extremely hard to earn back.

How exactly does this in any way impact user trust? It doesn't impact the main site, like the dashboard, the landing page, orany other part of GitHub like profiles, repositories, or organizations. It literallyonly impacts the enterprise marketing pages, and its for sales data tracking & analytics. GitHub Enterprise is a very business-oriented product, so the only visitors to those pages will be by business leaders potentially interested in GitHub Enterprise, or users who land on that page by mistake.

And I believe that is what GitHub meant when they said "to serve GitHub.com" - the main site (dashboard, repos, profiles, etc), not including stuff related to their Enterprise product, so I genuinely don't believe they broke their commitment. People are overreacting, as usual, to insignificant changes that don't really impact them.

Marcisbee, PatheticMustan, 5HT2, SayakMukhopadhyay, wopian, nowaythisworks, SheepTester, gavinhenderson, mbmjertan, NeuronButter, and 8 more reacted with thumbs up emojiafkvido, timvisee, unfunco, nothub, dallincrane, TheMaverickProgrammer, talesaraujo, yannikbloscheck, rodrigoruan-osf, jonm58, and 35 more reacted with thumbs down emojiafkvido reacted with confused emoji

@afkvido
Copy link

Thats fine but fuck microsoft for existing

afkvido, dominikwilkowski, nothub, xv, musaubrian, ryuukk, CauaLW, Rikj000, SkyyWasTaken, tavofh98, and 7 more reacted with thumbs up emojievieluvsrainbows, jtraglia, Consolatis, whiztech, PatheticMustan, jcorkhill, 5HT2, TreeBranches, samuel-hunter, nowaythisworks, and 24 more reacted with thumbs down emoji

@afkvido
Copy link

There's a reason this PR has 128+ negative reactions 👎

afkvido, dominikwilkowski, nothub, localcached, TheMaverickProgrammer, ryuukk, talesaraujo, CauaLW, Rikj000, speller26, and 16 more reacted with thumbs up emojievieluvsrainbows, 5HT2, nowaythisworks, Colerar, Asjas, dszymon, RokeJulianLockhart, thyeggman, itpropro, and 0kku reacted with thumbs down emoji

@afkvido
Copy link

Also, they have, take a look at this PR.

afkvido, dominikwilkowski, AOrps, and Mariosalaslopez reacted with thumbs up emojievieluvsrainbows, Colerar, brunoqualhato, Asjas, dszymon, thyeggman, and 0kku reacted with thumbs down emojiMariosalaslopez reacted with confused emoji

@evieluvsrainbows
Copy link

evieluvsrainbows commentedAug 3, 2022
edited
Loading

@afkvido: Also, they have, take a look at this PR.

This was more than likely not Microsoft's doing. Not everything a subsidiary of Microsoft does is because of Microsoft itself. You have the vast majority of comments on this PR (at 8 comments), and your opinion isn't be all end all. Most of the negative reactions are additionally probably from people who don't understand the scope of what GitHub said back when they committed to not use cookies not necessary to serve GitHub itself - they probably didn't extend it to the Enterprise marketing pages to begin with and always meant the main site that serves repositories and profiles and such.

There are things worse than cookies by the way, like actual trackers embedded in web pages. Cookies are relatively harmless if used sparingly and for very specific purposes like tracking sales analytics or for keeping a user logged into their web browsers, or in a specific GitHub use case, tracking the current site theme. There is nothing wrong with stuff like this.

You seem awfully mad at Microsoft for some reason, as if they stole your pet dog or something. This isn't 2000s & early 2010s-era Microsoft, Microsoft is nowhere near as bad as they were when Steve Ballmer was the CEO of Microsoft. Ever since Satya became CEO, I have noticed a significant improvement in Microsoft's business culture and strategy. MS was way, way,way worse back when Ballmer was CEO.

(also, slight question, why upvote your own comments?)

theolivenbaum, gldraphael, GoldenretriverYT, StuSerious, PatheticMustan, lunaisnotaboy, SayakMukhopadhyay, wopian, nowaythisworks, itslychee, and 11 more reacted with thumbs up emojiafkvido, Zethson, nothub, rkujawa, ulfox, TheMaverickProgrammer, talesaraujo, yannikbloscheck, rootwork, parkuristt, and 25 more reacted with thumbs down emojigresm reacted with confused emoji

@afkvido
Copy link

This was more than likely not Microsoft's doing. Not everything a subsidiary of Microsoft does is because of Microsoft itself.

I don't know why anyone at GitHub would do this change, and Microsoft is the only other entity with the authority to make such a change.


You have the vast majority of comments on this PR (at 8 comments), and your opinion isn't be all end all.

I just poke in whenever this comes up on my GitHub notifications.


Most of the negative reactions are additionally probably from people who don't understand the scope of what GitHub said back when they committed to not use cookies not necessary to serve GitHub itself - they probably didn't extend it to the Enterprise marketing pages to begin with and always meant the main site that serves repositories and profiles and such.

That is a good point, however, that doesn't change the fact that GitHub is no longer the white and fluffy angel that it was.


There are things worse than cookies by the way, like actual trackers embedded in web pages. Cookies are relatively harmless if used sparingly and for very specific purposes like tracking sales analytics or for keeping a user logged into their web browsers, or in a specific GitHub use case, tracking the current site theme. There is nothing wrong with stuff like this.

While you seem quite intelligent, I don't think that you understand that cookies could actually be used as slight trackers, and if used to their fullest potential, complete on-site tracking for AI/ML based targeted recommendations for profit.


You seem awfully mad at Microsoft for some reason, as if they stole your pet dog or something. This isn't 2000s & early 2010s-era Microsoft, Microsoft is nowhere near as bad as they were when Steve Ballmer was the CEO of Microsoft. Ever since Satya became CEO, I have noticed a significant improvement in Microsoft's business culture and strategy. MS was way, way, way worse back when Ballmer was CEO.

Microsoft is still a mega-corp. They're still 'evil', just like Google or Apple. I also don't see much of a difference with the two CEOs. One was making more money, one was discussing ethics more often, but in the end, Microsoft is still somewhat invasive. To add on, Microsoft decided to absolutelyRUIN Minecraft, a game that I don't really play these days, but my friends play a lot.


(also, slight question, why upvote your own comments?)

(also, slight question, why downvote my comments?)

talesaraujo, leoheck, afkvido, mitchellzehr, duck-nukem, zendynar, cryptoAlgorithm, oneEyedCharlie, Eireen, and UNINOIZE reacted with thumbs up emojinowaythisworks, Rexogamer, Mijyuoon, lunaisnotaboy, thatlittleboy, encode42, dszymon, qfr68414, TeknikalDomain, seve, and 6 more reacted with thumbs down emojiEnduringBeta, samuel-hunter, and robahub reacted with confused emoji

@zzo38
Copy link

I think that the cookies ought to be documented, so that you know which cookie means what.

I also think that they should avoid using confusing privacy policies; the mention of DNT should either be kept as is if GitHub uses the DNT header to reduce tracking, or deleted entirely if GitHub does not use the DNT header. If it does so only in some cases, it should mention what cases these are. The privacy policy made sense before the change in the section about DNT, although the change mentioned above makes it confusing (as other comments already mention).

Mentioning other programs such as Privacy Badger and uBlock Origin are OK, although it might be worth to add a disclaimer if GitHub is not affiliated with such programs, even if they are hosted on GitHub. (Since GitHub is used for many FOSS projects, it is likely that some of them will be.)

I have no problem with adding these non-essential cookies to the enterprise marketing pages, as long as the rest of GitHub can be used without it and it is documented which pages these are (and if the cookie domain is the same, also which cookies). Moving the enterprise marketing pages to a separate domain seems to me to be a good idea though, in order to be clearly distinguished (although a subdomain is probably good enough, in my opinion; as long as it is documented clearly which subdomains these are).

About alternatives to GitHub, I would not recommend GitLab because it will not display the files if JavaScripts are not enabled. However, it is acceptable to use GitLab if there are mirrors on multiple services. GitHub, Codeberg, and NotABug, and some others, also use JavaScripts, although the files can be displayed even if JavaScripts are disabled (even though there is a note that says enable JavaScripts, it is not required to simply view files), so it is acceptable. Another alternative is Sourcehut, which also doesn't need JavaScripts (and says that all features work without JavaScripts, although it still has some).

Consolatis, evieluvsrainbows, terrarier2111, bdemirel, Mijyuoon, boomboompower, real-yfprojects, amytimed, bdougherty, techyCoder81, and 16 more reacted with thumbs up emoji

@afkvido
Copy link

I don't mind GitLab, except that I have to pause for 15 minutes to finish laughing every time i see "Merge Requests"

oatovar, nowaythisworks, Colerar, amytimed, lunaisnotaboy, bsedin, wheresalice, googleson78, ifarbod, leftshift, and 9 more reacted with thumbs down emojireal-yfprojects, afkvido, mytja, Rwarcards762, fuomag9, and renancaraujo reacted with laugh emojiRokeJulianLockhart reacted with confused emoji

@sammcj
Copy link

What happened to this policyhttps://github.blog/2020-12-17-no-cookie-for-you/ ?

I guess it's a bit like Microsoft ❤️ Linux....

talgat-ruby, nothub, freearhey, talesaraujo, null2264, Rikj000, speller26, amytimed, theRealProHacker, guarilha, and 34 more reacted with thumbs up emojievieluvsrainbows and itpropro reacted with thumbs down emoji

@VahidRafieiPour
Copy link

15k + 25k + 50k=

versions:
fpt:'*'
topics:
-Policy
-Legal
---

Effective date: May 31, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

HHH

Copy link

@bulosandaina05bulosandaina05 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

1

Copy link

@Jwhite6381Jwhite6381 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Johnny

giangpro881 reacted with thumbs up emoji
Copy link

@CryptopuyCryptopuy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

635491

@Cryptopuy
Copy link

#930

@Cryptopuy
Copy link

#122 635491

@nooroayas
Copy link

Nooriayas55@gmail.com

yesraazazmeh5 reacted with hooray emoji

@nooroayas
Copy link

  • [ ]
yesraazazmeh5 reacted with heart emoji

@nooroayas
Copy link

Nooriayas55@gmail.com

yesraazazmeh5 reacted with thumbs up emoji

@SoeAung95
Copy link

git checkout main # main branch
git pull origin main # latest changes update

yesraazazmeh5 reacted with eyes emoji

@OpgKwa
Copy link

![screenshot-2025-02-14-15-18-52-default](https://github.com/user-attachments/assets/6549b018-5b6e-4b1e-adf8-b15ce93f2971

yesraazazmeh5 reacted with rocket emoji

@Poeta1986
Copy link

GitHub is introducing non-essential cookies on web pages that market our products to businesses. These cookies will provide analytics to improve the site experience and personalize content and ads for enterprise users. This change is only on subdomains, likeresources.github.com, where GitHub markets products and services to enterprise customers.Github.com will continue to operate as-is.

This change updates the Privacy Statement based on this new activity.

These updates will go into effect after the 30-day notice and comment period, on September 1, 2022.

Seecomment below with clarifications and changes made at the end of the comment period.
Comment on #582 Privacy Statement Updates September 2022
We want to thank everyone for their review and feedback on the Privacy Statement Update. We appreciate and share your passion for developer privacy. GitHub remains committed to having the highest privacy standards and will continue to center the needs of developers in all of our platform decisions. We intend for this to be a minimally invasive change that will enable us to provide the best tools to our users. In response to your comments, we are providing the following changes and points of clarification:
DNT and self-help browser extensions
Commenters raised questions about our language on DNT and self-help browser extensions. We've pushed acommit that:
• Folds the existing DNT and browser extension information into a new section on disabling non-essential cookies.
• Specifies there will be a user setting to disable non-essential cookies and provides additional details to clarify which cookies will be used and for what reasons.
• Specifies that DNT will be honored on GitHub, and that if a DNT signal is sent, GitHub will not load third party resources which set non-essential cookies, so that we do not have to rely on third parties honoring DNT.
• Browsers' built-in tracking protection has advanced significantly in recent years, so we've noted that configuring that built-in protection may block non-essential cookies.
• Separated mentions of browser extensions designed to block tracking, and extensions designed to block unwanted content with the effect of blocking tracking, for clarity, though using either alone or in combination may block non-essential cookies.
• Changed links with additional information on DNT and browser extensions to point to their respective Wikipedia articles for neutrality, currency, and to clarify that these are not GitHub products (though of course we're proud that many privacy protection tools are developed on GitHub).
Finally, some have asked why we’re explaining technical self-help tools. GitHub has a very broad user base, including new developers – and we want everyone to be informed about the scope of their options, including technical options.
Enterprise user experience
Commenters asked for clarification about how this change will impact the enterprise user experience. We are introducing cookies on GitHub’s Enterprise Marketing Pages (e.g.resources.github.com), not on Enterprise user accounts. We intend for this change to make it easier for our Marketing team to better understand the needs of users who are visiting Enterprise Marketing Pages and connect them with the solutions that will benefit them most.
Users who visit these pages will have the option to express their cookies preferences by navigating to the link in the footer of the page.
Stylistic change
Commenters have asked why ‘Personal Data’ was changed to ‘personal data’ in the Privacy Statement update. We made personal data lowercase because it is not a defined term in our Terms of Service, for consistency with “All capitalized terms have their definition inGitHub’s Terms of Service, unless otherwise noted here.” The stylistic change does not impact its definition.

@Elnandya396
Copy link

GitHub is introducing non-essential cookies on web pages that market our products to businesses. These cookies will provide analytics to improve the site experience and personalize content and ads for enterprise users. This change is only on subdomains, likeresources.github.com, where GitHub markets products and services to enterprise customers.Github.com will continue to operate as-is.

This change updates the Privacy Statement based on this new activity.

These updates will go into effect after the 30-day notice and comment period, on September 1, 2022.

Seecomment below with clarifications and changes made at the end of the comment period.Comment on #582 Privacy Statement Updates September 2022 We want to thank everyone for their review and feedback on the Privacy Statement Update. We appreciate and share your passion for developer privacy. GitHub remains committed to having the highest privacy standards and will continue to center the needs of developers in all of our platform decisions. We intend for this to be a minimally invasive change that will enable us to provide the best tools to our users. In response to your comments, we are providing the following changes and points of clarification: DNT and self-help browser extensions Commenters raised questions about our language on DNT and self-help browser extensions. We've pushed acommit that: • Folds the existing DNT and browser extension information into a new section on disabling non-essential cookies. • Specifies there will be a user setting to disable non-essential cookies and provides additional details to clarify which cookies will be used and for what reasons. • Specifies that DNT will be honored on GitHub, and that if a DNT signal is sent, GitHub will not load third party resources which set non-essential cookies, so that we do not have to rely on third parties honoring DNT. • Browsers' built-in tracking protection has advanced significantly in recent years, so we've noted that configuring that built-in protection may block non-essential cookies. • Separated mentions of browser extensions designed to block tracking, and extensions designed to block unwanted content with the effect of blocking tracking, for clarity, though using either alone or in combination may block non-essential cookies. • Changed links with additional information on DNT and browser extensions to point to their respective Wikipedia articles for neutrality, currency, and to clarify that these are not GitHub products (though of course we're proud that many privacy protection tools are developed on GitHub). Finally, some have asked why we’re explaining technical self-help tools. GitHub has a very broad user base, including new developers – and we want everyone to be informed about the scope of their options, including technical options. Enterprise user experience Commenters asked for clarification about how this change will impact the enterprise user experience. We are introducing cookies on GitHub’s Enterprise Marketing Pages (e.g.resources.github.com), not on Enterprise user accounts. We intend for this change to make it easier for our Marketing team to better understand the needs of users who are visiting Enterprise Marketing Pages and connect them with the solutions that will benefit them most. Users who visit these pages will have the option to express their cookies preferences by navigating to the link in the footer of the page. Stylistic change Commenters have asked why ‘Personal Data’ was changed to ‘personal data’ in the Privacy Statement update. We made personal data lowercase because it is not a defined term in our Terms of Service, for consistency with “All capitalized terms have their definition inGitHub’s Terms of Service, unless otherwise noted here.” The stylistic change does not impact its definition.

@jawid66
Copy link

Nooriayas55@gmail.com

زرنگ

@venpisey
Copy link

5167170015919920

Copy link

@rizinator007rizinator007 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Bentley

chole22 reacted with heart emoji
@kizooj
Copy link

kizoojun

@ULTRAPAOTHAiLAND31110

#582

@commanderrobot14
Copy link

work as closed

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

@user9227473327163user9227473327163 mentioned this pull requestJul 3, 2025
@@ -33,13 +34,13 @@ To see our Privacy Notice to residents of California, please go to [GitHub's Not

| Section| What can you find there?|
|---|---|
|[Who is responsible for the processing of your information](#who-is-responsible-for-the-processing-of-your-information)| Subject to limited exceptions, GitHub is the controller and entity responsible for the processing of your Personal Data in connection with the Website or Service.|
|[What information GitHub collects](#what-information-github-collects)| GitHub collects information directly from you for your registration, payment, transactions, and user profile. We also automatically collect from you your usage information, cookies, and device information, subject, where necessary, to your consent. GitHub may also collect Personal Data from third parties. We only collect the minimum amount of Personal Data necessary from you, unless you choose to provide more.|
|[Who is responsible for the processing of your information](#who-is-responsible-for-the-processing-of-your-information)| Subject to limited exceptions, GitHub is the controller and entity responsible for the processing of your personal data in connection with the Website or Service if you are in North America. For individuals outside North America the data controller is GitHub B.V.|

This comment was marked as outdated.

Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment
Reviewers

@literarytealiteraryteaAwaiting requested review from literarytea

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

202 participants
@jdgregson@leoheck@TechSolomon@TheMaverickProgrammer@ocdtrekkie@karlshea@afkvido@RoyTinker@tylt6688@jacamera@evieluvsrainbows@zzo38@sammcj@DK1MI@pankajthekush@nothub@gruselhaus@jnehlmeier@just-max@ryuukk@PythonCoderAS@ddevdan@nodgear@Obazzi@Nllii@sz55net@parpok@GoldenretriverYT@BlueSkyClouds@francisashley@SawyerHopkins@Sooraj-s-98@amytimed@stamminator@EduApps-CDG@steven9463912@Hudson-AmalembaL@avin-kavish@mackuba@seebs@RoonMoonlight@pablodz@pivic@hagemt@devtooligan@csnyder616@thany@Mindgamesnl@ThomasFrans@torstenvl@bnb@bermannoah@Studio384@jmillerv@EtchedPixels@mbifulco@9999years@jdsimcoe@aldenjenkins@ricobeck@RamiAwar@ryanvade@ajain-1@sethmlarson@lennartzellmer@andrewthetechie@BLamy@ezufall@Rwarcards762@agowa@vixalien@jhilker98@KaizNike@BigmenPixel0@leestarb@aidapsibr@UnoYakshi@kyemets@jtardioli@SalvatorePreviti@imsnif@calebhearth@jeffwask@lodo1995@aredridel@ericksoa@efaruk@owlshrimp@tobypinder@Consolatis@GrahamWilliams-DMT@nopeitsnothing@EricB10@BitesizedLion@TotallyInformation@ItsIgnacioPortal@dginovker@ntindle@TJesionowski@pixincreate@benthecarman@4JX@aral@gatlinnewhouse@JokerQyou@NunoSempere@itpropro@buyvtuygJW@apfelnymous@RokeJulianLockhart@luckycharmsx@Tunealb@goyalyashpal@uJhin@shellsmck@Karmavil@doot0@sunays@Abdunasere@Emmy1106@mhirkhan1988@Sakineh1375@Enrique464@Herkimerladeras@iLSlyfer@ladyiwahpo@PonratMCMC@jhomar32@EnsDeLiz@yshnayd888@A7mad1990@Evrilek@thumbcacheidx001@princeAbrarRehmam@Goldenboy402@Lainezs@VahidRafieiPour@Cryptopuy@nooroayas@SoeAung95@OpgKwa@Poeta1986@Elnandya396@jawid66@venpisey@kizooj@ULTRAPAOTHAiLAND31110@commanderrobot14@rick@jonsterling@rjgotten@dushmis@airtower-luna@tejusp@EmmanuelArenas@MrBartusek@BEEFF@CADawg@krystian3w@freezer2019@XynoxTheDev@resistor420@djsunay@Nakatai-0322@flexagoon@Uzhastin-Nikita@ArjunSharda@site-policy-bot@Aa1106443102@devashish2024@mxrcury@Mc480@Khdawq@al1103@Ttamez68A@amirkhan7javi@Elizeu12270@Marco79617@Abo-Sofian@Nate191941@richardcox69@ASTON-ELON@binhle113@perezz281@rodneymorgan225@chhayyatry168@Ret1ge@Yanayn1895@J-GitHub2023@hhdhkkbhjm@mommommo19@Mariosalaslopez@Nguyentantai2204@ANATAEB@Rdy42@stillhated@Jwhite6381@bulosandaina05@sheikhaftab005@rizinator007@Escarcega1989@olholder

[8]ページ先頭

©2009-2025 Movatter.jp