Website Account Data
Registration may collect email, real name or organization name, screen name, branch of service, veteran/dependent status, optional service-connection details, and optional VA rating level. This supports saved tools, submissions, community posting, moderation, and desktop licensing.
Submissions and Community
Provider leads, accredited-person submissions, DBQ prompts, forum posts, and community records are stored for review. Public display should use screen names unless a verified professional chooses otherwise. Forum and submission records may include admin-only IP and browser metadata for moderation and safety.
Usage Analytics and IP Safety Logs
VA Companion may store site activity such as page views, tool opens, button clicks, device class, referrer host/path, search phrases when a search engine provides them, IP address, masked IP, hashed IP fingerprint, and approximate visitor area when available. Full IP details are restricted to administrators and used for security, abuse prevention, troubleshooting, moderation, and credible emergency safety review. Analytics do not store VA.gov records, claim details, medical details, credentials, or typed form text.
Desktop Activation
Desktop activation sends the website login, machine ID, request type, optional old machine ID, and device label. It does not upload VA.gov credentials, MFA codes, documents, claim snapshots, cookies, tokens, or local vault data.
Desktop Update Checks
The desktop app checks a public manifest and may read public/reference endpoints. Update checks do not upload veteran data, claim data, documents, VA.gov passwords, cookies, tokens, or database contents.