Strongest: User Control
80/100
GitLab gives users more direct privacy control than its other categories, especially around clear admin controls.
GitLab is a DevSecOps platform, reviewed for repository data, product telemetry, sharing, tracking, retention, and organization controls.
70
Mixed
70
Mixed
GitLab combines broad tracking with unusually strong privacy controls.
GitLab gives users more direct privacy control than its other categories, especially around clear admin controls.
GitLab is weakest on ads and tracking because tracking, analytics, and ad-related signals still follow how people use the service.
70
Mixed
The reviewed privacy statement does not provide one simple no-AI-training promise for all repository and usage data.
GitLab documents the data categories it collects across websites, SaaS, self-managed, and other services.
75
Good
55
Weak
70
Mixed
80
Good
About Privacy Page
Open: about.gitlab.com1. AI Use
The reviewed privacy statement does not provide one simple no-AI-training promise for all repository and usage data.
2. Controls
GitLab documents the data categories it collects across websites, SaaS, self-managed, and other services.
Founded
Unknown
Founder
Unknown
Parent Company
GitLab
Lifecycle
Active
Category
Developer Platforms & Infra
CEO
Unknown
Security Team
In house
Date Added
04-22-2026
Once you delete a chat, you cannot recover it. Deleting a chat removes it both from your visible chat history and the system after the retention window.
75
Good
GitLab documents personal data rights, sharing categories, and security practices.
Repositories can be exposed through project visibility, integrations, group members, CI logs, and legal disclosures.
55
Weak
GitLab collects website, account, usage, and telemetry data depending on service use.
Self-managed deployments give organizations more control over product data flows.
70
Mixed
Retention varies by service, account state, legal duties, and customer configuration.
GitLab documents rights and choices for personal data.
80
Good
Admins can manage groups, projects, visibility, SSO, tokens, runners, and integrations.
Sensitive data can leak through public projects, CI logs, variables, and overly broad member access.
80
Good