Opensearch
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Linux Foundation sites collect account, usage, and public project data, use ads/trackers, and license your posts broadly.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account and profile info, posts, project contributions, cookies, IP, and sometimes event or health details.
Read the exact line
Privacy policy
“We collect personal information directly from individuals, from third parties, and automatically through the Sites and Services.”
Training
They run sites and projects, market to you, run analytics, and target ads on their sites and other sites.
Read the exact line
Privacy policy
“For targeting advertising to you on our Sites and third-party sites and measuring the effectiveness and reach of ads and services (through third-party ad networks and services).”
Sharing
Public project posts are public; they also share with vendors, affiliates, and event sponsors if you agree.
Read the exact line
Privacy policy
“Your contributions to Open Source Projects, and certain of your other Content such as comments and messages posted to public forums, are available to other participants and users of our Projects and of our Services, and may be viewed publicly.”
Kept
They keep it as long as they need it for those purposes, and sometimes longer for legal reasons.
Read the exact line
Privacy policy
“We generally keep personal information only for as long as required to fulfill the purposes for which it was collected.”
Controls
You can edit your LF ID profile online and email them to access, fix, or ask to erase data.
Read the exact line
Privacy policy
“If you have registered with us and created a Linux Foundation ID profile or an LFX Account wish to access or update certain personal information contained therein, you may do so online by visiting the “My Profile” or “My Account” settings”
Fine print
Posts can be taken down and accounts removed; the site is “as is” and they take a lasting license on submissions.
Read the exact line
Terms of service
“ALL CONTENT IS PROVIDED BY THE LINUX FOUNDATION AND/OR THE MEMBERS ON AN “AS IS” BASIS ONLY.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Update your Linux Foundation ID profile
My Profile / My Account or https://myprofile.linuxfoundation.org
Ask to access, correct, or erase personal information
privacyrights@linuxfoundation.org
Unsubscribe from marketing emails
Unsubscribe links in emails or LF UNSUBSCRIBE as described in the privacy policy
Opt out of interest-based ads via Cookie Policy tools
Cookie Policy linked from the privacy policy (targeted ads section)
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They and ad partners can use your activity to show you ads on this site and elsewhere.
Read the exact line
Privacy policy
“For targeting advertising to you on our Sites and third-party sites and measuring the effectiveness and reach of ads and services (through third-party ad networks and services).”
For example, visiting pytorch.org pages could lead to related ads on other websites.
Turning on Do Not Track in your browser will not stop their tracking.
Read the exact line
Privacy policy
“Please note that TLF does not respond to browser “do not track” signals or other similar mechanisms intended.”
For example, enabling DNT in Chrome will not change how they collect browsing data.
What you upload (code or other content) is licensed to them forever under BSD or Creative Commons.
Read the exact line
Terms of service
“you agree that the following non-exclusive, , worldwide licenses shall apply:”
For example, a blog comment you post can be reused under CC Attribution even if you leave.
They say they are not responsible if the site or content causes you loss.
Read the exact line
Terms of service
“IN NO EVENT WILL THE LINUX FOUNDATION AND/OR THE MEMBERS BE TO YOU (AN INDIVIDUAL OR ENTITY) OR ANY OTHER INDIVIDUAL OR ENTITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, PUNITIVE, SPECIAL OR CONSEQUENTIAL DAMAGES”
For example, if bad advice on the site costs you money, these terms say they will not pay.
They can delete your account after repeated rule breaks, and they can take down posts.
Read the exact line
Terms of service
“A second violation will result in the removal of your user account.”
For example, two forum posts they call spam could get your login removed.
Some pages record a replay of how you click and type, via third-party tools.
Read the exact line
Privacy policy
“For some parts of the Sites, we use the Datadog and FullStory services to record session replays and data regarding a user’s interaction with the Sites for debugging and development purposes.”
For example, a session on a docs page could be replayed later for debugging.
Code and related contribution records stay public forever so licenses can be checked.
Read the exact line
Privacy policy
“to maintain, and make publicly available on a basis, records regarding intellectual property provenance and license compliance for Project contributions”
For example, your name on a git commit to a Project stays in the public history.
They claim basic security steps but do not promise they cannot be breached.
Read the exact line
Privacy policy
“We have implemented commercially reasonable precautions designed to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction.”
For example, they say they try to protect accounts, but you still need a strong password.
The stated age floor is 16, based on them not knowingly signing kids up.
Read the exact line
Privacy policy
“Except as specifically indicated within a Site, we do not knowingly collect or solicit personal information from anyone under the age of sixteen (16), or knowingly allow such persons to register.”
For example, a 15-year-old could still type an older age; they say they delete if they find out.
For big privacy changes they will try to warn you on the site or by email.
Read the exact line
Privacy policy
“If we make any changes to this Privacy Policy that materially change how we treat your personal information, we will endeavor to provide you with reasonable notice of such changes”
For example, a new ad-sharing practice should get a notice, not only a silent page edit.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
How we got here · grade D · score 37/100 · 15 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect account and profile data, your posts and contributions, plus cookies, IP, browsing, and session-replay tools. Optional event health and visa details can also be collected.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use cookies and third-party ad networks and analytics, including ads on other sites, and they do not honor Do Not Track.
Do they sell or share your data, and can you opt out?
They share with service providers and affiliates, make project posts public, and may share event data with sponsors if you consent.
What rights do they take over what you type and what the AI makes?
Unless a project has its own contributor terms, code is under BSD and other posts under Creative Commons Attribution, as irrevocable worldwide licenses.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as needed for the stated purposes or law. You can edit a profile in-app; erasure is by contacting them and may be limited.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use commercially reasonable precautions. No independent audit or known-breach statement is in these pages.
Is there a real age gate, and are teens protected?
They say they do not knowingly collect from anyone under 16, and will delete if they find out, unless a site specifically gets parental consent.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated. They will post changes and try to give reasonable notice of material changes, but retention periods stay general.
Can they close your account without warning, and can you get your data out first?
They can take down posts and, after a second violation, remove your account. They also reserve the right to block access.
If something goes wrong, who pays?
Content is provided “as is” with no warranties, and they disclaim almost all damages.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 5,386 words at a college graduate level (Flesch reading ease 30.1); the terms are 1,646 words at a college level.
