Privacy policy

GitHub Skolpunkten is a web service schools use to teach programming: teachers create classes and projects, and students get their own repos in the school's GitHub organization. The service is provided by Skolpunkten. This page describes how personal data is processed.

1. Who is responsible?

The school is the data controller for data about students and teachers in GitHub Skolpunkten. Skolpunkten is a data processor and processes the data only on the school's behalf, following the school's instructions and the data processing agreement between the school and us. We never use the data for our own purposes, and we never sell it.

For data submitted through the interest form on the website — before a school is connected — Skolpunkten is the data controller.

2. What data is processed?

• From the GitHub sign-in: your GitHub username, GitHub id, display name, avatar and email address. We never receive your password.
• Classes and projects: which classes, projects and groups you belong to, links to your repos and whether a repo is locked.
• The class roster: first and last name and any notes the teacher enters, and whether you're a member of the school's GitHub organization.
• The interest form: the school's name, your name, your email address and your message.

3. Repos live on GitHub

Student repos are created in the school's own GitHub organization and stored by GitHub, Inc. The contents of the repos — code, commits and comments — are therefore not stored by GitHub Skolpunkten. The school's agreement with GitHub and GitHub's privacy statement apply to GitHub accounts and repos. GitHub Skolpunkten uses a GitHub App that the school installs on its organization, with only the permissions needed to create repos, grant access and invite students to the organization.

4. Legal basis

The legal basis for the school's processing is decided by the school as controller — usually that the processing is necessary for a task in the public interest (teaching). For the interest form, the basis is our legitimate interest in answering the request.

5. Storage and security

The service's data is stored on servers within the EU/EEA and protected by access control and encrypted transfer. Teachers only see the classes they created or were added to, and students only see their own repos.

6. How long is data kept?

Data is kept as long as the school uses GitHub Skolpunkten, or for the shorter period the school decides. When the school stops using the service, the data is deleted according to the data processing agreement. Repos in the school's GitHub organization are not affected — they belong to the school. Interest form submissions are deleted when no longer needed to answer the request.

7. Your rights

You have the right to know what data is processed about you, to have incorrect data corrected and in some cases to have it deleted. Since the school is the controller, please contact your school first — we help the school with your request. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

8. Cookies and local storage

GitHub Skolpunkten uses no advertising or tracking cookies. The browser's local storage keeps you signed in, and a cookie remembers your chosen language.

9. Contact

Questions? Contact your school first. You can also reach Skolpunkten at kontakt@skolpunkten.se.