Codeberg
- The documents do not say whether your data trains AI.
- The policy rules out using your data for targeted ads.
- Data is shared only with the providers who run the service.
- The policy describes staff access for safety and legal checks.
A German non-profit git host: you keep your code, no ads, they can suspend you, and commit names may be kept forever.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, optional Git author names, truncated IPs and browser logs, plus payment data if you donate.
Read the exact line
Privacy policy
“Account details (username, e-mail addresses, name, linked accounts), for the purpose of providing you with an account on our platform.”
Training
They use data to run the site, stop abuse, and handle donations—not for ads or targeted tracking.
Read the exact line
Privacy policy
“Codeberg does NOT use cookies or other techniques for user-targeted analytics or advertisements.”
Sharing
Staff, moderators, and a few processors (backups, payments) can see data; servers are in Germany.
Read the exact line
Privacy policy
“Codeberg's Moderation Team can access private repositories & additional metadata required to investigate potential violations of our terms.”
Kept
Account data until you delete it; IPs up to 7 days; backups up to a year; commit authors may stay forever.
Read the exact line
Privacy policy
“Account details are stored until the deletion of the account.”
Controls
You can change settings, close your account, and email them to use rights like access or .
Read the exact line
Privacy policy
“If you would like to exercise any of these rights, please use the contact information listed in Art. 2 of this privacy policy.”
Fine print
They can suspend you anytime, the site is as-is, and term changes show as a dashboard banner.
Read the exact line
Terms of service
“Be aware that any account can get suspended at any time if it is used for activities harming Codeberg e.V. or its associated platform and services, directly or indirectly”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Close your account when you leave
Terms § 4: you may close your account at any time; remove content you do not want to persist first
Change account details in settings
https://codeberg.org/user/settings
Ask for access, , or a copy of your data
Contact privacy@codeberg.org (Art. 2 of the privacy policy)
Keep your own backups
Terms § 3 (3): you are solely responsible for regular backups
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Even if you leave, they may keep the name and email baked into your Git commits forever because of open-source licenses.
Read the exact line
Privacy policy
“Codeberg e. V. reserves the right to maintain a copy of commit authorship records indefinitely.”
For example, deleting your account may not remove your name from old commits people still clone.
They can shut your account without a full list of reasons and without promising notice.
Read the exact line
Terms of service
“Be aware that any account can get suspended at any time if it is used for activities harming Codeberg e.V. or its associated platform and services, directly or indirectly”
For example, they could suspend you for traffic they see as harmful even if it is not listed in the rules.
They do not promise the site will work or that your repos will stay online.
Read the exact line
Terms of service
“The materials on our platform are provided on an 'as is' basis. Codeberg makes no , expressed or implied”
For example, if the forge is down and you lose work you did not back up, they say they are not .
If something goes wrong, they try not to pay for lost data or other harm.
Read the exact line
Terms of service
“In no event shall Codeberg or its suppliers be for any damages (including, without limitation, damages for loss of data or profit, or due to business interruption)”
For example, a deleted repo would be your problem to restore from your own backups.
If you rarely log in, you might miss rule changes and still be bound by them.
Read the exact line
Terms of service
“If you do not login for longer than three months, it is your own responsibility to recheck for the current Terms of Use.”
For example, after a long break you could violate a new rule you never saw.
Private repos are not fully private from staff when they check abuse.
Read the exact line
Privacy policy
“Codeberg's Moderation Team can access private repositories & additional metadata required to investigate potential violations of our terms.”
For example, a report about a private repo could lead staff to open it.
They say they are not building ad profiles or selling ad tracking.
Read the exact line
Privacy policy
“Codeberg does NOT use cookies or other techniques for user-targeted analytics or advertisements.”
For example, browsing issues should not feed a third-party ad network.
You keep copyright in what you upload; hosting is not a transfer of ownership.
Read the exact line
Terms of service
“Contributors own all rights and ownership for content and contributions they provided. Using the platform does not imply any transfer of ownership or copyright.”
For example, they do not claim they own your source code just because it is on Codeberg.
They shorten IPs in logs so they are less tied to you.
Read the exact line
Privacy policy
“When stored in logs, the IP address is truncated so that this data is not associated with your personal data.”
For example, a log of a page visit should not keep your full home IP.
You can leave, but you must clean up repos yourself if you do not want them to stay.
Read the exact line
Terms of service
“You may close your account at any time. Please be aware that it is your responsibility to remove content and contributions that you no longer wish to persist.”
For example, closing the account may leave public commits visible unless you delete them first.
Words to know
Legal words from the lines above, in plain English.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- human review
- Company staff or contractors may read your messages or content, usually to check for rule breaking. For example, a flagged private chat with an AI can be read by a person at the company.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
How we got here · grade B · score 54/100 · 15 of 15 policy answers backed by a verified quote · 4 not stated
What does the app collect beyond what it needs to work?
They collect account details plus technical logs such as truncated IP, browser, OS, URLs, and referrer, and payment data if you donate.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Moderators and admins can access private repos and metadata to investigate rule breaks and keep the servers running.
Are you profiled or tracked for advertising?
They say they do not use cookies or other techniques for targeted analytics or ads.
Do they sell or share your data, and can you opt out?
Third parties are limited to backups, some hosting, payment processors, banking and payroll under processing agreements.
What rights do they take over what you type and what the AI makes?
Contributors keep ownership; using the platform does not transfer copyright. Public repos must still use an open license.
How long do they keep your data after you delete it, and can you delete it in the app?
Account data lasts until deletion; GDPR erasure is by contacting them. Commit authorship may be kept indefinitely; backups up to a year.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say servers are in Germany, IPs in logs are truncated, and they use necessary session cookies.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
Neither document has a last-updated date. Term changes are shown as a dashboard banner; if you skip login for three months you must check yourself.
Can they close your account without warning, and can you get your data out first?
They can suspend accounts immediately for rule breaks or harm. Abandoned accounts get a one-month email warning after 365 days unused.
If something goes wrong, who pays?
The platform is as-is with no warranties, and they disclaim damages including lost data.
Do subscriptions renew on their own, and can you get a refund?
Hosting is free; they mention donations and membership fees, not a paid product subscription.
The privacy policy is 1,561 words at a college level (Flesch reading ease 43.5); the terms are 1,946 words at a college graduate level.
