Trust, Legal & Safety on Documentation

Mon, 01 Jan 0001 00:00:00 +0000

Code of Conduct — OpenCommit#

Effective Date: 2026-01-31
Last Updated: 2026-03-25

1. Purpose#

OpenCommit exists to support open source development and responsible software collaboration. This Code of Conduct defines the standards of behavior expected from all users of the OpenCommit platform (the “Service”).

Our goal is to foster a stable, inclusive, professional, and non-abusive environment for developers, organizations, and contributors.

This Code of Conduct applies to:

All users of the OpenCommit platform
All public and private repositories hosted on the Service
Issues, pull/merge requests, comments, profiles, and other user-generated content
Communications that take place through the platform

Violation of this Code may result in enforcement actions as described below.

Mon, 01 Jan 0001 00:00:00 +0000

Data Processing Addendum (DPA) — OpenCommit#

Effective Date: 2026-01-31
Last Updated: 2026-04-04

This Data Processing Addendum (“DPA”) forms part of the Terms of Service (“Agreement”) between Stichting OpenGit, operating as OpenCommit (OpenCommit Foundation), (“Processor”) and the entity subscribing to the Service (“Controller”).

1. Definitions#

“Data Protection Laws” means the EU General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (UAVG).
“Personal Data” means any information relating to an identified or identifiable natural person processed by Processor on behalf of Controller within the Service.
“Sub-processor” means any third party appointed by Processor to process Personal Data.

2. Scope and Role#

This DPA applies where OpenCommit processes Personal Data as a Processor on behalf of the Controller in the course of providing git hosting services. This typically includes data contained within private repositories, issue trackers, and pull requests.

Mon, 01 Jan 0001 00:00:00 +0000

Privacy Policy — OpenCommit#

Effective Date: 2026-01-31
Last Updated: 2026-04-04

The OpenCommit Foundation (Stichting OpenGit, a foundation (stichting)) (“OpenCommit”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our git hosting service at opencommit.eu (the “Service”).

OpenCommit is a foundation established in the Netherlands and is subject to the General Data Protection Regulation (GDPR).

Mon, 01 Jan 0001 00:00:00 +0000

Security Overview — OpenCommit#

Last Updated: 2026-04-04

OpenCommit aims to protect the confidentiality, integrity, and availability of the Service and user data. This Security Overview describes the technical and organizational measures we use to secure the platform. It is provided for transparency and does not form part of the Terms of Service.

1. Infrastructure and Hosting#

EEA-based hosting: Core infrastructure is hosted within the European Economic Area (EEA).
Hosting provider: Infrastructure is hosted with Hetzner Online GmbH in Germany and Finland.
Data center security: We rely on Hetzner’s data center security controls and certifications (including ISO/IEC 27001 where applicable) and industry-standard physical security measures.

2. Network Security#

Segmentation: We segment services to limit unnecessary access between components.
Firewalls: Inbound access is restricted to required ports and services.
Administrative access: Administrative access is limited and protected using strong authentication and encrypted connections.

3. Encryption#

In transit: Traffic between clients (web browsers and git clients) and OpenCommit is encrypted using modern TLS.
At rest: We use encryption where appropriate for backups and sensitive configuration material.

4. Authentication and Account Security#

Passwords: Passwords are stored using strong, one-way hashing.
2FA: We support and may require two-factor authentication (2FA) for accounts or organizations.
SSH: Git access supports SSH keys; users are encouraged to use modern key types (e.g., Ed25519).

5. Application and Dependency Security#

Forge software: The Service is based on Forgejo.
Patching: We monitor upstream security advisories and apply relevant security updates in a timely manner.
Hardening: We aim to minimize the attack surface by disabling or restricting non-essential services and features.

6. Monitoring and Logging#

Operational monitoring: We monitor service health and availability to detect incidents and outages.
Status monitoring: We may use third parties (e.g., Uptime Robot) for status/availability checks.
Security logging: We maintain logs relevant to security and abuse prevention. Access to logs is restricted.

7. Backups and Recovery#

Backups: We perform regular backups of repository and database data.
Recovery: We maintain recovery procedures to restore service after incidents.
User responsibility: Users remain responsible for maintaining independent backups of their repositories.

8. Incident Response#

Response: We investigate suspected security incidents and take appropriate steps to contain and remediate issues.
Notification: Where required by law or contract (for example under a DPA), we will notify affected parties of relevant incidents.

9. Vulnerability Reporting#

If you believe you have found a security vulnerability in OpenCommit, please contact:

Mon, 01 Jan 0001 00:00:00 +0000

Sub-processors — OpenCommit#

Last Updated: 2026-04-04

To provide our Service, OpenCommit engages the following third-party sub-processors to perform specific processing activities. All sub-processors are bound by Data Processing Agreements (DPAs) to ensure the protection of your personal data.

Entity	Activity	Location
Hetzner Online GmbH	Cloud Infrastructure & Hosting	Germany / Finland (EEA)
Soverin	Email	The Netherlands (EEA)
Uptime Robot	Status page (if accessed by user)	Slovak Republic (EEA)

Mon, 01 Jan 0001 00:00:00 +0000

Terms of Service — OpenCommit#

Effective Date: 2026-01-31
Last Updated: 2026-04-04

These Terms of Service (“Terms”) constitute a legally binding agreement between the OpenCommit Foundation (Stichting OpenGit, a foundation (stichting)) established under the laws of The Netherlands, with its statutory seat in Leiden, the Netherlands (“OpenCommit”, “we”, “us”, “our”), and you (“User”, “you”).

These Terms govern your access to and use of the OpenCommit platform available at https://opencommit.eu and related services (the “Service”).