SONARCLOUD-551 Document what information we are reading from user's profile

1 files changed, 37 insertions, 0 deletions

diff --git a/server/sonar-docs/src/pages/sonarcloud/privacy.md b/server/sonar-docs/src/pages/sonarcloud/privacy.md
index 144c9d2bedc..86f6df0183b 100644
--- a/server/sonar-docs/src/pages/sonarcloud/privacy.md
+++ b/server/sonar-docs/src/pages/sonarcloud/privacy.md
@@ -23,6 +23,43 @@ To improve the structure and the data we offer on our website, we might use open
 
 Data collected might include IP, time and duration of the visit, what pages are visited, used browser and add-ons/plugins, search-engines and referrer. While statistic tools might use a “cookie” to distinguish between individual visitors, the collected data doesn’t allow to identify individuals.
 
+## INFORMATION USED DURING AUTHENTICATION
+
+We use the following information for authentication with GitHub / Bitbucket / Azure DevOps.
+
+### GitHub
+* ID
+* Login
+* Name
+* Email
+* List of organizations the user is member of
+
+For more information:
+* https://developer.github.com/v3/users/#get-the-authenticated-user
+* https://developer.github.com/v3/users/emails/#list-email-addresses-for-a-user
+* https://developer.github.com/v3/orgs/#list-your-organizations
+
+### Bitbucket
+* UUID
+* Username
+* Display name
+* Email
+* Is email defined as primary
+
+For more information:
+* https://developer.atlassian.com/bitbucket/api/2/reference/resource/user
+* https://developer.atlassian.com/bitbucket/api/2/reference/resource/user/emails
+
+### Azure DevOps
+* Tenant ID
+* Object ID
+* Display name
+* User Principal Name
+* Email
+
+For more information:
+* https://docs.microsoft.com/en-us/graph/api/user-get?view=graph-rest-1.0
+
 ## SECURITY
 
 We take all the necessary technical and organisational security measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment that is not accessible to the public. If you communicate with us via e-mail, please note that the confidentiality of the information is not guaranteed. The contents of e-mails can be intercepted by third parties. In case of doubt we therefore recommend to send confidential information only by snail mail.