They say they don't do that. But maybe I should be more skeptical.
Ha, that’s why I’m hosting simple cgit server for myself only. Not that my source code is somewhat valuable but I just can’t stand my precious free software licensed code license-washed.
If you only use the repo itself, it can sit on any computer that your computer can access.