We’re dedicated to keeping your data safe, and we only collect information you explicitly share with us.
If you have questions which aren’t answered in this document, don’t hesitate to reach out via email (firstname.lastname@example.org), and we’ll get back to you as soon as possible.
Who is collecting the data?
The data is collected via GitSpeak.com and via the GitSpeak desktop app, both of which are owned and operated by the Norwegian corporation Scrimba AS.
What data is being collected?
We do not store your source code when you connect a local repository to the GitSpeak app. Nor do we access your source code via GitHub.
However, if you record a codecast in GitSpeak, we'll need to store the code files you open during the codecast, so that other team members can watch the screencast. In the future, we plan to add an option for not even storing code files when recording a cast. This will, naturally, require the viewer to also have the local repository connected to GitSpeak when viewing the codecast, so that GitSpeak can fetch the code from a local version of the repository.
The only personal data we collect is the data you give access to GitSpeak in the authentication process. For a GitHub repository, this includes metadata on members, issues, pull requests, milestones, but not the source code. For a GitHub organization, this includes basic metadata on the organization's repositories and members.
When a user signs up on GitSpeak using GitHub auth we'll store the user's mail address and any other public metadata shared on GitHub. This can include your bio, location, website and whatever extra information you have shared publicly on GitHub.
We’re also Google Analytics for tracking inside the app. This data is also pseudo-anonymized. We’re not sending any personal information to Google Analytics, and we have turned of IP tracking to comply with GDPR.
What is the legal basis for processing the data?
The legal basis for processing your personal data is your consent when signing up for GitSpeak.
Will the data be shared with any third parties?
Our data is stored on a dedicated server operated by OVH SAS, and it is located in Canada. OVH undertakes to abide by its obligations in accordance with the aforementioned regulations, particularly the GDPR.