Privacy Policy

1. Controller

TODO: Identity and contact details of the data controller pursuant to Art. 4(7) GDPR.

• Controller: TODO — legal entity
• Address: TODO
• Contact: TODO — email / phone

2. Data Protection Officer

TODO: Contact details of the Data Protection Officer (Art. 37–39 GDPR), if applicable.

3. Data Processed at Signup

When you create an account, we process the following personal data:

• Username — your chosen public identifier
• Email address — for verification and account recovery
• Password — stored only as a one-way hash; never in plaintext
• IP address — collected at signup for rate limiting and abuse prevention

4. Forgejo Account Data

As part of registration, a Forgejo developer account is provisioned using your username and email. Your chosen password (or a generated temporary password on the retry path) is transmitted once, in-process, solely to create your Forgejo login. It is not stored or logged by gitbuild.dev beyond the hashed Laravel credential.

5. Lawful Basis (Art. 6 GDPR)

• Art. 6(1)(b) — performance of the contract (providing your Git hosting account)
• Art. 6(1)(f) — legitimate interests (rate limiting, security, fraud prevention)
• Art. 6(1)(c) — legal obligation (retention records where required by EU/national law)

6. Data Retention

TODO: Retention periods for account data, repositories, logs, and IP records; deletion timelines after account closure.

7. Your Rights

Under the GDPR you have the right to:

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure / "right to be forgotten" (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection (Art. 21)
• Lodge a complaint with a supervisory authority (Art. 77)

8. Sub-processors & Transfers

TODO: List of sub-processors (hosting provider, Forgejo). Confirmation that no data leaves the EU / EEA. No third-country transfers.