This page describes what personal data CVE Risk Analyzer collects when you create an account, whether via the email/password form or "Sign in with Google," and how it's used.
Account creation collects your username and, if you sign up with Google, the name and email address Google shares with us as part of that sign-in. These are the same fields collected today via the email/password registration form — Google sign-in does not add any new categories of personal data.
This data is used solely to create and identify your account, and to route new signups through the existing admin-approval workflow before first login — every new account (email or Google) is reviewed by an admin before it becomes active.
Your account data is stored locally in this application's database (User and
UserProfile rows) and is not shared with any third party beyond what's necessary to
authenticate you with Google. It is never sent to the AI provider used elsewhere in this
app — that boundary already strips infrastructure/user-identifying data from AI-bound requests.