Privacy Policy and this website are operated by Semmle Inc. and its affiliates (collectively, "Semmle"). Semmle provides the service located at (the "Competition Site"), subject to this Privacy Policy. This Privacy Policy sets forth Semmle's policy with respect to information including personally identifiable data ("Personal Data") and other information that is collected from visitors to the Site and users of the Competition Site.

Information we collect

When you interact with us through the Competition Site, we may collect Personal Data and other information from you, as further described below. We do this in order to be able to run the Competition Site, and to provide you with the best possible user experience. The lawful basis for doing so (in terms of the European GDPR) is Legitimate Interests. You do not need to explicitly give us consent to process this information; by providing your personal information on the Competition Site (for example by signing in with GitHub) we assume that you are happy for us to store that data. You will find more information about our Legitimate Interest for processing data below.

Personal Data that you provide through the Competition Site

We collect Personal Data from you when you voluntarily provide such information, such as when you contact us with inquiries, sign in with GitHub or use certain components of the Competition Site. Wherever Semmle collects Personal Data we make an effort to provide a link to this Privacy Policy.

By voluntarily providing us with Personal Data, we understand you are happy for us to process Personal Data in accordance with this Privacy Policy. If you provide Personal Data to the Competition Site, you acknowledge and agree that such Personal Data may be transferred from your current location to the offices and servers of Semmle and the authorized third parties referred to herein.

Other information

Non-identifiable data

When you interact with Semmle through the Competition Site, we receive and store certain personally non-identifiable information. Such information, which is collected passively using various technologies, cannot presently be used to specifically identify you. Semmle may store such information itself or such information may be included in databases owned and maintained by Semmle affiliates, agents or service providers. The Competition Site may use such information and pool it with other information to track, for example, the total number of visitors to our Site, the number of visitors to each page of our Site, and the domain names of our visitors' Internet service providers. It is important to note that no Personal Data is available or used in this process.

In operating the Competition Site, we may use a technology called "cookies." A cookie is a piece of information that the computer that hosts our Competition Site gives to your browser when you access the Competition Site. Our cookies help provide additional functionality to the Competition Site and help us analyze Competition Site usage more accurately. For instance, our Site may set a cookie on your browser that allows you to access the Competition Site without needing to log in more than once during a visit to the Competition Site. In all cases in which we use cookies, we will not collect Personal Data except with your permission. On most web browsers, you will find a "help" section on the toolbar. Please refer to this section for information on how to receive notification when you are receiving a new cookie and how to turn cookies off. We recommend that you leave cookies turned on because they allow you to take advantage of some of the features of the Competition Site.

Aggregated Personal Data

In an ongoing effort to better understand and serve the users of the Competition Site, Semmle may conduct research on its user demographics, interests and behavior based on the Personal Data and other information provided to us. This research may be compiled and analyzed on an aggregate basis, and Semmle may share this aggregate data with its affiliates, agents and business partners. This aggregate information does not identify you personally. Semmle may also disclose aggregated user statistics in order to describe our services to current and prospective business partners, and to other third parties for other lawful purposes.


We may allow third party service providers to use cookies or similar technologies to collect information about your browsing activities over time and across different websites following your use of the Competition Site. For example, we use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies to help us analyze how users use the Competition Site and to enhance your experience of the service. For more information on how Google uses this data, go to

We may also permit Google Analytics to make use of a feature called User ID session stitching. This functionality allows for more accurate analytics by using the same user identifier over various sessions and devices. However, it is not intended to allow Google to personally identify an individual or permanently identify a particular device.

Retention policy

We store your Site account data (such as a user's name and email address) indefinitely. Access logs (which include information such as IP addresses) are stored for up to 3 months for debugging purposes. Site analytics data is stored for up to 26 months.

Our use of your Personal Data and other information: Why and How

Why (our Legitimate Interests)

At Semmle, we care about both your privacy and about helping people write better code. In order to do the best possible job we may use some of your information. We will never process more information than is strictly required in order to run the competitions site, unless you explicitly consent to additional processing.

To use some parts of the Competition Site, we need you to sign in using GitHub. For example, in order to enter a competition. We will store the information you provide us with (for example, your github username and email addresses) to make sure that you (and only you) have access to your account and to allow us to administer the competitions.

We are always working to improve the Competition Site; in order to know which areas are most heavily used, we store which pages are visited most.

Your Rights

Various different jurisdictions require us to inform you about your rights as a user. The European GDPR is one of the most strict data regulations, therefore we decided to use that as a guideline here. Note that the scope of this Privacy Policy extends to the data held on The Competition Site about users and visitors.

Individuals whose data is processed on the lawful basis of Legitimate Interests automatically have the following rights.

Right to be informed

This document, as well as the overview "Your data and privacy" are designed to inform you exactly how Semmle processes your data. If you would like to know more about how exactly we balance both your and our interests, rights, and freedoms: please contact us and we will be happy to provide you with our Legitimate Interests Assessment.

Right of access to your Personal Data

The Competition Site allows you to provide us with a very limited amount of Personal Data regarding you, which we store to provide you with a good user experience. Please contact us if you would like us to provide you with this data. We may require you to provide evidence to verify your identity.

Right to rectification

The data held by us on The Competition Site is provided by yourself. You can update this data at any point by logging in to The Competition Site. Feel free to contact us if you require assistance.

Right to object, right to erasure, and right to restrict processing

If you would like to object to Personal Data regarding you being processed by The Competition Site, or would like to restrict the processing, then you can contact us to do so.

Rights in relation to automated decision making and profiling

The Competition Site does not perform any automated decision making or profiling.


Semmle uses the Personal Data you provide in a manner that is consistent with this Privacy Policy. If you provide Personal Data for a certain reason, we may use the Personal Data in connection with the reason for which it was provided. For instance, if you provide Personal Data in order to obtain access to the Competition Site, we will use Personal Data regarding you to provide you with access to such services and to monitor your use of such services. Semmle may also use your Personal Data and other personally non-identifiable information collected through the Competition Site to help us improve the content and functionality of the Competition Site, to better understand our users and to improve the Competition Site.

If Semmle intends on using any Personal Data in any manner that is not consistent with this Privacy Policy, you will be informed of such anticipated use prior to or at the time at which the Personal Data is collected.

Our disclosure of Personal Data regarding you and other information

Semmle is not in the business of selling your information. We consider this information to be a vital part of our relationship with you. There are, however, certain circumstances in which we may share Personal Data regarding you with certain third parties without further notice to you, as set forth below:

Business transfers

As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets.

Corporate affiliates

We may also share Personal Data regarding you with our corporate affiliates for purposes consistent with this Privacy Policy.

Agents, consultants and related third parties

Semmle, like many businesses, sometimes hires other companies to perform certain business-related functions. Examples of such functions include maintaining databases. When we employ another entity to perform a function of this nature, we only provide them with the information that they need to perform their specific function.

Legal requirements

Semmle may disclose Personal Data regarding you if required to do so by law or in the good faith belief that such action is necessary to (i) comply with legal process, applicable laws or government requests; (ii) enforce our Terms of Service; or (iii) protect the rights, property, or personal safety of Semmle, its users or the public.

Your choices

You can visit the Competition Site without providing any Personal Data (other than your IP address). If you choose not to provide any Personal Data, you may not be able to use certain components of the Competition Site.


This Privacy Policy does not apply to any Personal Data collected by Semmle other than Personal Data collected through the Competition Site. This Privacy Policy shall not apply to any unsolicited information you provide to Semmle through the Competition Site or through any other means. This includes, but is not limited to, information posted to any public areas of the Competition Site, such as forums, any ideas for new products or modifications to existing products, and other unsolicited submissions (collectively, "Unsolicited Information"). All Unsolicited Information shall be deemed to be non-confidential and Semmle shall be free to reproduce, use, disclose, and distribute such Unsolicited Information to others without limitation or attribution.


Semmle does not knowingly collect Personal Data from children under the age of 13. If you are under the age of 13, please do not submit any Personal Data through the Competition Site. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce our Privacy Policy by instructing their children never to provide Personal Data on the Competition Site without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Data to Semmle through the Competition Site, please contact us, and we will endeavor to delete that information from our databases.

Links to other websites

This Privacy Policy applies only to the Competition Site. The Competition Site may contain links to other web sites not operated or controlled by Semmle (the "Third Party Sites"). The policies and procedures we described here do not apply to the Third Party Sites. The links from the Competition Site do not imply that Semmle endorses or has reviewed the Third Party Sites. We suggest contacting those sites directly for information on their privacy policies.


Semmle takes reasonable steps to protect the Personal Data provided via the Competition Site from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from the Competition Site may not be secure. Therefore, you should take special care in deciding what information you send to us via email. Please keep this in mind when disclosing any Personal Data to Semmle via the Internet.

Changes to Semmle's Privacy Policy

The Competition Site and our business may change from time to time. As a result, at times it may be necessary for Semmle to make changes to this Privacy Policy. Semmle reserves the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this policy periodically, and especially before you provide any Personal Data. This Privacy Policy was last updated on the date indicated below. Your continued use of the Competition Site after any changes or revisions to this Privacy Policy shall indicate your acceptance of the terms of such revised Privacy Policy.

Access to information and contacting Semmle

To keep your Personal Data accurate, current, and complete, please contact us as specified below. We will take reasonable steps to update or correct Personal Data in our possession that you have previously submitted via the Competition Site. Please also feel free to contact us if you have any questions about Semmle's Privacy Policy or the information practices of the Competition Site.

Please contact us at [email protected] with any questions regarding this Privacy Policy. You can also use this address to contact our Data Protection Officer.

Filing a complaint

If you are unhappy about any part of this Privacy Policy, please contact our Data Protection Officer by sending a message to [email protected] Alternatively, you can file a complaint with the Information Commissioner's Office in the United Kingdom, or the relevant authorities in the United States.

History of this Privacy Policy

This policy was last modified on Sep 19th 2018.