Privacy statement
Rijksbegroting Dashboard is operated by [operator: to be filled in]. This statement describes what data the site processes, why and for how long.
Without an account
The Freemium dashboard works without an account and without cookies. The calculation runs in your browser; the engine confirmation only sends the slider positions, no personal data. For visitor statistics we use Plausible, which sets no cookies and does not track individuals. To limit abuse our servers keep a request's IP address in memory briefly (at most one minute).
Shared scenarios
A share link holds only the slider positions and a derived code; no author is attached. Anyone with the link can view the scenario.
With an account (Pro)
For an account we process your email address (and, when signing in with Google, your name) through Supabase Auth, on servers in the European Union. Your saved scenarios are stored under your account; a scenario is private unless you make it public. Sign-in sessions use a functional cookie.
Payments
Payments run through Stripe. Stripe processes your payment details and billing address; we store only your Stripe customer id, the subscription status and the period end date. Stripe Tax determines VAT from your address.
Budget assistant
Questions to the Budget assistant go to the calculation engine and from there to Anthropic (Claude), which translates the question into slider positions. Per question we store the question text, the answer, the sliders used and the token usage to limit abuse and cost (free 5 questions a day, Pro 100 a day). Without an account the IP address is only counted as an irreversible hash; with an account the question is kept under your account.
Documents (Pro)
A PDF you upload for 'Import a document' is kept in protected Supabase storage (EU) under your account. To read it we send the document to the calculation engine and from there to Anthropic (Claude); Anthropic does not use API data to train models. We keep the file, the measures found and the proposal for 30 days and then delete them automatically. You can delete a document yourself earlier.
Errors and performance
On an error, a report without personal data may go to Sentry, and performance data (traces) may go to our monitoring (Grafana Cloud). Both are on only when the operator has configured them.
Retention
Account data and saved scenarios are kept as long as your account exists; deleting your account removes them. Subscription data is kept as long as the fiscal retention duty applies. Shared scenarios remain as long as the snapshot they are tied to is served.
Your rights
You can request access, correction or deletion of your data and object to the processing. You have the right to lodge a complaint with the Dutch Data Protection Authority.
Contact
Privacy questions: [contact address: to be filled in].
Last updated: November 2026.