Skip to main content

Privacy policy

Last updated: August 30, 2026

This policy explains how the Hydra project handles information when you visit the Hydra website at hydra.cc.

Information collected​

The website does not require an account and does not ask you to provide personal information directly.

Like most websites, our hosting and network providers may process routine technical information needed to deliver, secure, and maintain the site. This may include your IP address, browser and device type, requested pages, the date and time of a request, and the referring page.

Google Analytics​

We use Google Analytics 4 to understand, in aggregate, how the website and its documentation are used. Its default measurements include page and session activity, approximate location, and browser and device information. Google Analytics may set first-party cookies, including _ga, to distinguish users and sessions.

Google Analytics uses IP addresses during collection to derive approximate location information. Google states that IP addresses are discarded before the data is logged in Google Analytics. We do not use Google Analytics to identify individual visitors or for advertising, and we do not intentionally send names, email addresses, or other directly identifying information to it.

Google processes Analytics data under its own terms and privacy practices. For more information, see Google's explanation of how it uses information from sites that use its services and the Google Privacy Policy.

Contributor License Agreement signing​

Hydra uses the SAP-hosted CLA Assistant service to administer its Individual Contributor License Agreement (CLA). Signing takes place on CLA Assistant, not on the Hydra website. CLA Assistant authenticates you through GitHub and records your acceptance of the agreement version displayed to you.

The signing flow records:

  • your GitHub username and repository context;
  • your full legal name and email address;
  • your confirmation that you are at least eighteen years old;
  • the CLA title, Gist URL, and exact Gist revision;
  • when you signed and, if applicable, when the service recorded a revocation; and
  • the service's organization-signing indicator. Hydra does not use CLA Assistant to execute Entity CLAs.

Hydra uses this information to determine whether contributions may be merged, administer the CLA, preserve evidence of the agreement and rights granted, and resolve questions or disputes about contribution authorization. Public pull requests may display a CLA status or comment stating whether the relevant contributors have signed. Hydra does not publish signers' legal names or email addresses.

SAP SE controls CLA Assistant and processes signing information under its own CLA Assistant Privacy Statement. SAP states that it obtains GitHub identity information from GitHub, makes signed agreement information available to project owners, and may use SAP group companies and service providers or transfer information internationally. Your use of GitHub is also subject to the GitHub Privacy Statement.

Hydra may export signing records from CLA Assistant for independent evidence, backup, recovery, and service continuity. These exports are kept private, and access is limited to the Hydra project steward and any person specifically authorized to administer Hydra's contributor agreements.

Hydra retains the agreement version and signing evidence for as long as reasonably necessary to establish the agreement and the continuing rights it granted, administer contributions, and assert or defend legal claims. This may continue after you stop contributing or after CLA Assistant records a revocation. Hydra treats a recorded revocation as preventing new contributions from being accepted unless you sign again; it does not revoke licenses already granted for Contributions covered by the Agreement.

For access, correction, deletion, restriction, or other requests concerning SAP's copy of your information, contact cla_assistant@sap.com. SAP explains in its privacy statement that legal obligations or prevailing rights may limit deletion. For requests concerning Hydra's exported records, contact privacy@hydra.cc. Hydra may need to retain the original acceptance evidence, but can correct current contact information or attach an appropriate correction to the historical record.

Other service providers and external sites​

The website is delivered using Cloudflare and GitHub Pages, and its search feature is provided by Algolia. These providers may process technical request or search information under their own privacy policies. The website also links to external sites. Their privacy practices apply when you visit them.

Your choices​

You can block or delete cookies using your browser settings. Google also offers a Google Analytics opt-out browser add-on. Blocking cookies or analytics may not prevent processing that is necessary to deliver or secure the website.

Data retention​

Analytics event data is retained according to the retention settings of the Hydra Google Analytics property. Aggregated reports that do not identify individual visitors may be retained for longer. Other providers retain information according to their own policies.

Changes to this policy​

We may update this policy when the website or its services change. We will update the date at the top of this page when we do.

Contact​

For questions or requests about this policy, email privacy@hydra.cc.