It accesses the module proxy proxy.golang.org, which is run by Google. If you want to opt-out of this module mirror, you can turn it off by setting GOPROXY=direct.
The proxy has a clear privacy policy: https://proxy.golang.org/privacy
It collects anonymized usage metrics like other package registries (rubygems.org, nuget.org, crates.io) do.