What the policy must cover

Repository context is not an ordinary marketing lead.

  • names, work email addresses, organizations, roles, and application responses;
  • repository language, approximate size, agent/harness, project gates, and transaction descriptions;
  • trial telemetry, native evidence, independent evaluation, and sanitized aggregate data only when separately agreed;
  • server and analytics data, including whether Cloudflare Web Analytics is enabled;
  • purpose, legal basis, processors, retention, deletion, security, cross-border processing, user rights, and policy changes.

Public form warning

Do not submit source archives, credentials, private URLs with tokens, or confidential code through the public form.