# Git Privacy

This document references all Git timestamps that pose a privacy concern.

## Commit Object Timestamps

[Git commit objects](https://git-scm.com/docs/user-manual.html#commit-object) always have at least 2 timestamps:

* `GIT_AUTHOR_DATE` is the timestamp used for the "author" field.
* `GIT_COMMITTER_DATE` is the timestamp used for the "committer" field.

## Annotated Tag Object Timestamps

[Annotated Git tag objects](https://git-scm.com/docs/user-manual.html#tag-object) always have at least 1 timestamp:

* `GIT_COMMITTER_DATE` is the timestamp used for the "committer" field.

## GnuPG Signature Timestamps

[GnuPG signatures](https://www.gnupg.org/gph/en/manual/x135.html) on signed commits and signed annotated tags include a timestamp.

## Git Forges

Some Git forges log and/or publicly reveal when commits are pushed.

**TODO**: Investigate and document each forge's Git push logging.

## License

This file is licensed under [CC-BY-SA 4.0](LICENSE).