Returns a copy of the personal data held about you, for a data access request (GDPR article 15) or to take it elsewhere (article 20).
HTTP
POST /account/exportAccess: Session token only. API keys get 403 with insufficient_scope. The export is recorded in the audit log as account.exported.
Request body #
JSON.
| Field | Type | Required | Description |
|---|---|---|---|
password | string | yes | Your password, to confirm. |
JSON
{ "password": "correct horse battery" }Response 200 #
A JSON file (Content-Disposition: attachment; filename="my-data.json") with these members:
| Member | Content |
|---|---|
exportedAt | When the export was made. |
account | Id, email, name, job title, company, preferences, when you joined and when you turned on two-factor authentication. |
organizations, teams, projects | Your memberships and roles. |
sessions | Your signed-in browsers and devices: user agent and times. |
apiKeys | Name, last four characters, scopes and dates of your personal and project keys. The keys themselves are not stored in a readable form and are not included. |
activity | Your audit log entries, with the IP address and user agent recorded. |
translations, translationHistory | Translations you wrote, submitted or reviewed, and the history entries you made. |
comments, notes | Review comments and key notes you wrote. |
glossaryTerms, tags | Glossary terms and tags you created or changed. |
invitationsSent | Invitations you sent. |
integrations | The GitHub and GitLab connections you made. |
The password hash, the two-factor secret and the recovery codes are never included. Each list holds at most 10,000 entries.
Errors #
| Status | error | When |
|---|---|---|
| 401 | unauthenticated | The token is missing or not valid. |
| 403 | wrong_password | password is not your password. |
| 429 | rate_limited | Too many requests, see Rate limiting. |
See Errors for the error format.