Briefly: as little as possible. You need no account, we sell nothing on, we do not store your IP address alongside what you check, and statistics only count if you say so.
The address, number or e-mail you check is used to run the check and update the dossier. It appears, with nothing about you attached, in "Just checked" on the home page.
We use your IP address briefly, in memory, to limit abuse: one vote per dossier per day, and a cap on checks per minute. It is not stored with your check, your vote or your comment.
What you leave is publicly visible on the dossier page. Links are stripped automatically. Do not include personal data — yours or anyone else’s.
To reach a verdict we consult public sources: RDAP at the registry, DNS, the site’s own TLS certificate, URLhaus, Spamhaus and Google Safe Browsing. They see the address being checked, not who checked it.
If you say yes on the cookie bar, Google Analytics 4 counts pages, time per page and country, with the IP address anonymised, plus the kind of check and the verdict — not what you checked. Google Ireland Ltd is our processor; data may be processed in the US under the EU–US Data Privacy Framework. Kept for 14 months. Withdraw at any time on the cookies page.
You have the right of access, correction and erasure. Because we cannot link anything to you, in practice there is rarely anything to erase — except a comment you left yourself. E-mail us and we will remove it.
Data controller: GOAT Pixels — info@isditveilig.nl
Unhappy with how we handle your data? You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).