Privacy
Last updated 22 Oct 2026
This page explains what personal data the Article 14 dashboard shows, why, and what you can ask.
Who is responsible
This dashboard and the project behind it are run by the GitLab user Chinorab as an entry to the GitLab Transcend hackathon. For any privacy request, open an issue on the project.
What is shown
- GitLab usernames
- The usernames of the people and service accounts that acted on a case, with the time of the action, as recorded on public GitLab issues, merge requests and pipelines of this project.
- Decision records
- Who confirmed a qualification, started a production deployment, approved a draft or recorded a submission, and when.
- Software facts
- SBOM contents, versions and vulnerability identifiers. They describe software, not people. Package metadata can still name authors.
Why
The records show how and when each notification under Article 14 of Regulation (EU) 2024/2847 was prepared and approved. Keeping that trail is the point of the tool.
What this site does not do
- It never submits a report to an authority.
- It has no sign in, no forms and no tracking or analytics.
- It sets no cookies and stores nothing in your browser.
Where it is hosted
The pages are static files in a Google Cloud Storage bucket in the europe-west1 region (Belgium). The source records live on GitLab.com. Both providers keep standard access logs, such as IP addresses, under their own policies.
How long
The site is kept online until the hackathon results are announced, around 16 November 2026, then removed. GitLab records follow the project.
Your rights
You can ask for access, correction or removal of any data about you shown here, and object to its display, by opening an issue on the project. You can also complain to your data protection authority, for example the CNIL in France.