Privacy notice
Inburgering Monitor is an independent platform and is not affiliated with DUO or DigiD. The platform account is separate from DigiD. We do not ask you to submit DigiD passwords, PINs or verification codes to a platform form.
If you contact us, we store your name, email address, subject and message encrypted on the server. Authorized administrators can read these messages and send replies to your supplied email address. Replies are stored encrypted, with delivery status. New-message alerts are sent to the operator without the message body. Contact messages remain stored until removed by the operator; they are not automatically deleted when monitoring data is deleted.
We keep aggregate public page-view counts by day and approximate city for 90 days. City information, when supplied by our trusted network provider, is approximate. These statistics do not store IP addresses, visitor identifiers or links to individual accounts.
Authentication sessions run in a private browser process for each account on the server. You personally navigate the official DUO / DigiD pages and complete authentication. Session cookies are sensitive authentication material. Users with active access can open their own official login flow. Do not enter your DigiD username and password into chat or into a platform account form.
We process account identifiers, password hashes, subscription and payment records, notification settings, monitoring status, and security audit events. We do not record login keystrokes or browser video. Remote screen frames are transmitted transiently to the authorized user. The remote browser transmits official page content to you and retains encrypted DUO session state on the server. Results monitoring reads the six exam subject statuses after you sign in and start monitoring. Stored results are encrypted. DigiD-origin cookies are excluded from persisted browser state. Input and screen recordings are not retained.
Proposed purposes are account administration, provision of the agreed service, optional notifications and security. The controller must establish and document the lawful basis for each purpose before launch. User consent does not constitute permission from DUO or DigiD to automate or host sessions.
Sent/cancelled notification records and audit events are removed after 90 days by default. Account, order, refund and unresolved delivery records need a formally approved retention schedule; they are not automatically erased under this prototype. Use the dashboard to delete monitoring data, browser state and preferences. Backup copies may retain deleted records until their retention period ends; deletion requests must be reapplied after restoration.