CERRA · Account privacy
Privacy & account data
Updated September 24, 2026. This notice explains how CERRA handles personal accounts, Google sign-in and shared Litter reviews.
Information used to sign in
CERRA stores your invited email address, the display name you provide, your account permissions and authentication activity. Google sign-in authenticates an existing invited account; it does not create a new account or grant project access.
If you connect Google, Google supplies your account identifier, email, email-verification status and basic profile information. CERRA checks that the email matches your invitation and stores the Google account identifier for future sign-ins. Your CERRA display name comes from your invitation acceptance or profile settings, rather than your Google profile.
The Google sign-in flow requests only basic identity permissions. It does not request Gmail, Drive, Calendar or Contacts access. CERRA’s sign-in code does not save Google ID, access or refresh tokens in the account database.
Shared reviews and attribution
Your name and email are saved with Litter review decisions. Authorized Litter project members can view and export that attribution. Editing your display name does not rewrite the name on earlier reviews. Importing earlier browser reviews attributes the imported decisions to the account performing the import.
Cookies and service providers
Essential cookies maintain your CERRA session and complete Google sign-in. Display preferences and earlier review records may remain in your browser. Account records and authentication events support access control, troubleshooting and abuse prevention.
CERRA runs on Sites hosting with Cloudflare account storage. Google processes Google authentication. Resend processes your email address, name and one-time link when CERRA sends an invitation or sign-in email. These services process information needed to provide those functions.
Your choices and record retention
Google sign-in is optional; invited members can also use an email sign-in link. You can edit your display name in My account and sign out at any time. You can remove CERRA’s connection in your Google Account settings, but this does not delete your CERRA account or past reviews.
Account, authentication-audit and shared-review records do not currently have an automatic deletion schedule. There is no self-service CERRA account deletion or Google-disconnection control. An administrator can disable account access and revoke CERRA sessions.
For account corrections, Google disconnection, deletion or other privacy requests, contact your CERRA administrator or Bo Shang at bshang@umd.edu. Requests involving shared research records require administrator review.