1. Minimal Telemetry Footprint & Strictly Necessary Cookies: Audit records are indexed strictly by public repository slug (owner/repo), invoice reference, and maintainer contact email. First-party HttpOnly session cookies are used solely to authenticate access to your private telemetry report portal (exempt under ePrivacy Art. 5(3)); zero third-party analytics or ad-tracking cookies are used.

2. Zero-Trace NDA Mode: Client repositories and compiled AST audit reports are never published in public customer rosters or shared with third-party marketing lists.

3. Instant Outreach & Repository Opt-Out (RFC 8058 / GDPR): Any maintainer or contributor may permanently exclude their email address or repository from benchmark notifications via /unsubscribe or by emailing alex@gitscope.dev.