Kubernetes
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
LF Projects sites collect usage data, use third-party ads and analytics, and keep open-source posts public, with as-is .
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Posts and contributions, plus IP, browser, pages viewed, and similar usage data.
Read the exact line
Privacy policy
“LFP may automatically collect the following information about Users’ use of the sites or services through cookies, web beacons, and other technologies: your domain name; your browser type and operating system; web pages you view; links you click; your IP address;”
Training
They run the projects, personalize the site, measure use, and target ads on their sites and others.
Read the exact line
Privacy policy
“Advertising. For targeting advertising to you on our Sites and third-party sites and measuring the effectiveness and reach of ads and services (through third-party ad networks and services).”
Sharing
Public posts are public; they also share with vendors, Linux Foundation, affiliates, and advertisers.
Read the exact line
Privacy policy
“Your contributions to Open Source Projects, and certain of your other Content such as comments and messages posted to public forums, are available to other participants and users of our Projects and of our Services, and may be viewed publicly.”
Kept
They keep data as long as they need it, and longer for legal or complaint reasons.
Read the exact line
Privacy policy
“We apply a general rule of keeping personal data only for as long as required to fulfil the purposes for which it was collected.”
Controls
You can email them to access or change data, and unsubscribe from marketing emails.
Read the exact line
Privacy policy
“You may contact our privacy coordinator, as set forth below, to access or amend your personal information.”
Fine print
The site is as-is with no damages paid; they can take down posts and block accounts.
Read the exact line
Terms of service
“ALL CONTENT PROVIDED BY LF PROJECTS IS ON AN “AS IS” BASIS ONLY. LF PROJECTS PROVIDES NO REPRESENTATIONS, CONDITIONS AND/OR , EXPRESS OR IMPLIED,”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Ask to access or amend your data
Email @lfprojects.org or privacy@lfprojects.org
Unsubscribe from marketing emails
Unsubscribe link in marketing emails or privacy@lfprojects.org
See ad opt-out options
Cookie Policy at https://lfprojects.org/policies/cookie-policy/
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They and ad networks can use your site activity to show you ads here and on other websites.
Read the exact line
Privacy policy
“Advertising. For targeting advertising to you on our Sites and third-party sites and measuring the effectiveness and reach of ads and services (through third-party ad networks and services).”
For example, visiting a project page could be used to show you related ads on another site.
Turning on Do Not Track in your browser will not stop their tracking.
Read the exact line
Privacy policy
“Please note that LFP does not respond to “do not track” signals or other similar mechanisms intended to allow California residents to opt-out of Internet tracking under California Online Privacy Protection Action (“CalOPPA”).”
For example, enabling DNT in Chrome will not change how they collect browsing data.
Code and related records you contribute can stay public forever so others can see who contributed what.
Read the exact line
Privacy policy
“to maintain, and make publicly available on a basis, records regarding intellectual property provenance and license compliance for Project contributions”
For example, your name and email on a git commit may remain in the public history even if you later leave.
If the site or content causes you harm or loss, they say they will not pay you.
Read the exact line
Terms of service
“IN NO EVENT WILL LF PROJECTS, OUR SERVICE PROVIDERS AND/OR ANY PARTICIPANT OF ANY PROJECT BE TO YOU (AN INDIVIDUAL OR ENTITY) OR ANY OTHER INDIVIDUAL OR ENTITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, PUNITIVE, SPECIAL OR CONSEQUENTIAL DAMAGES”
For example, if bad advice on a wiki costs you time or money, they disclaim .
They can remove your posts for the listed reasons or other reasons they choose.
Read the exact line
Terms of service
“LF Projects reserves the right to take down anything you post on this site, for these or other reasons.”
For example, a comment they dislike could be deleted even if it is not spam.
If they say you broke the rules twice, they can delete your account.
Read the exact line
Terms of service
“A second violation will result in the removal of your user account.”
For example, two posts they call flaming could get your login removed.
Vendors who run hosting, payments, and similar work can receive your information.
Read the exact line
Privacy policy
“We may share your information with third party service providers who use this information to perform services for us, such as payment processors, hosting providers, auditors, advisors, contractors and consultants.”
For example, a hosting company could process logs that include your IP address.
They say they take ordinary security steps but do not promise the data cannot leak.
Read the exact line
Privacy policy
“We have implemented commercially reasonable precautions to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction.”
For example, they warn that no security measure is 100% guaranteed.
They say kids under 13 should not give personal information, but they do not describe a strong age check.
Read the exact line
Privacy policy
“Except as specifically indicated within a Site, we do not knowingly collect or solicit personal information from anyone under the age of 13”
For example, a 12-year-old could still type an email unless a specific site says otherwise.
For big privacy changes they will try to warn you on the site or by email.
Read the exact line
Privacy policy
“If we make any changes to this Privacy Policy that materially change how we treat your personal information, we will endeavor to provide you with reasonable notice of such changes”
For example, they might post a notice on the policy page if they start using data in a new way.
Words to know
Legal words from the lines above, in plain English.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- tracking pixels
- Tiny invisible images or bits of code in a page, app or email that report back when and where you opened it. For example, a pixel in a marketing email tells the sender the moment you read it.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
How we got here · grade D · score 37/100 · 14 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect what you contribute and post, plus automatic usage data such as IP address, browser, pages, and cookies.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use cookies, Google Analytics, and third-party ad networks for targeted ads on their sites and other sites.
Do they sell or share your data, and can you opt out?
They share with service providers, affiliates, Linux Foundation, and advertisers; cookie policy is said to cover ad opt-out.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as needed for the purpose, longer for law or complaints; you contact them to access or erase.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use commercially reasonable precautions and that no measure is 100% secure.
Is there a real age gate, and are teens protected?
They say they do not knowingly collect from anyone under 13 (14 in Spain or South Korea), without describing age checks.
Will they tell you when the rules change, and is the policy specific?
The policy is dated 2019; they will post changes and try to give reasonable notice of material privacy changes.
Can they close your account without warning, and can you get your data out first?
They can take down posts, warn you, remove an account after a second violation, and block an IP or account.
If something goes wrong, who pays?
Content is as-is with no warranties, and they disclaim all kinds of damages.
Do subscriptions renew on their own, and can you get a refund?
The terms do not describe subscriptions, auto-renewal, or refunds.
The privacy policy is 3,463 words at a college graduate level (Flesch reading ease 32.7); the terms are 1,700 words at a college level.
