Implement a privacy policy

[adamhotep]

Perhaps I simply cannot find it, but jsperf.com does not appear to have a privacy policy (the FAQ has no mentions of the word "privacy"). Since you're storing email addresses (the only Github item you request access to), this may violate of GDPR (I'm not a lawyer, but this could result in millions of euros in fines, even if you're not based in the EU).

I recommend establishing a privacy policy and not storing email addresses, or at the very least stating what you do with them. I don't know much about Github's OAuth mechanism; perhaps it requires this and you simply throw out that data? Your privacy policy should be linked on every page (in the "Info" section by the FAQ link).

(I have not looked at the site code.)