The govulncheck command retrieves vulnerability information
for modules by connecting to the Go Vulnerability Database run by Google
(vuln.go.dev).
Clients send data in HTTP requests to this database, which logs standard HTTP information:
We use this data for debugging. In general, we've built this tool to retain as little information about usage as possible while still ensuring that we are able to detect and fix problems.
We do not store logged identifiable information such as IP addresses for more than 30 days. We also do not correlate or combine information from our request logs with any personal information that you have provided Google for other services.
If you'd like to read the main policy which govulncheck adheres to, see the Google Privacy Policy.