dutchstarter

Legal

Privacy policy

Last updated May 26, 2026

This policy explains what dutchstarter collects, why, and what you can do about it.

Who runs dutchstarter

dutchstarter is operated by Kraai Online, registered with the Dutch Chamber of Commerce under number 91312353. Our address is De Nieuwe Erven 3, unit 13661, 5431 NV Cuijk, the Netherlands. We are the data controller for any personal data you give us. For privacy questions, write to hello@dutchstarter.com.

What we collect

  • Wizard answers: origin, city, arrival date, profile, housing status, and current stage. You give these to us so we can personalize your checklist.
  • Email address: only if you give it to us, either at the optional wizard step or when you sign in via magic link.
  • Authentication identity: when you sign in with Google or magic link, Firebase Auth creates an account with your email and (for Google) your name and avatar.
  • Checklist progress: which items you have marked complete or skipped.

We do not log IP addresses ourselves, fingerprint your browser, or track you across other sites. See the Analytics section below for what Plausible records on our behalf.

Why we collect it, and on what basis

Under Article 6 of the AVG (the Dutch GDPR), every piece of data needs a lawful basis. Ours are:

  • Wizard answers and checklist progress: legitimate interest in delivering the service you asked for.
  • Email address: your explicit consent. You typed it, and you can ask us to remove it any time.
  • Authentication identity: contract. We cannot maintain an account without it.

Who has access to your data

Your data sits with a small number of trusted sub-processors:

  • Google Cloud (Firebase): Authentication, Firestore database, App Hosting, Cloud Functions, and Cloud Storage. Google’s data centres are global; we rely on Standard Contractual Clauses for transfers outside the EU.
  • Resend: to send the welcome email if you give us your address. Resend processes the email content and your address only to deliver the message.
  • Plausible Analytics: EU-hosted, cookieless page-view and event analytics. Plausible never sees your email or any other personal identifier.

We do not sell your data. We do not share it with marketing networks, advertisers, or third parties beyond the sub-processors above.

How long we keep your data

  • Signed-in accounts: until you delete your account, or you request manual removal.
  • Anonymous sessions tied to an email: 180 days from your last activity, then automatically deleted.
  • Anonymous sessions with no email: stored only in your browser’s IndexedDB. We have no copy and cannot recover it if you clear your browser storage.

Your rights

Under the AVG you have the right to access, correct, delete, restrict, port, and object to processing of your data, and to withdraw consent at any time.

For deletion, sign in and use Settings → Delete account. This removes your account and saved data immediately. For any other request, write to hello@dutchstarter.com and we will respond within 30 days. You can also lodge a complaint with the Dutch data-protection authority, Autoriteit Persoonsgegevens.

Cookies

We use one cookie:

  • ds_signed_in_before: a small functional cookie set after you sign in. It stores the value 1 for one year and lets your browser remember that this device has been signed in before, so we can show a “welcome back” greeting instead of the wizard prompt on the homepage. It is not used to track you and is cleared when you delete your account.

We do not use marketing or advertising cookies. Our analytics tool (Plausible) is cookieless by design. If we ever add a cookie-based tracker, a consent banner will ship in the same change.

Analytics

We use Plausible Analytics to understand how visitors use dutchstarter. Plausible is a privacy-friendly analytics service based in the EU. It does not use cookies and does not collect personal information.

We can see general usage patterns: which pages are popular, which checklist items get the most attention, and which partner recommendations get clicked. We cannot identify individual visitors.

Plausible’s privacy policy: plausible.io/privacy.

Affiliate links

Some partner links in the checklist are affiliate links. If you sign up with a partner through one of those links, the partner may pay dutchstarter a small commission. The price you pay is the same either way; partners absorb the commission as a customer-acquisition cost. Each affiliate link is labelled with a small “Affiliate” pill on the partner card so you can tell which is which. Not every link is an affiliate link. Government services, local GPs, and other public resources appear because they are useful, not because anyone pays us.

How we choose partners. We list companies we would personally recommend to a friend moving to the Netherlands: banks, telecoms, insurers, energy suppliers, and so on. Where multiple options make sense, we list two or three so you can compare. The order in which partners appear reflects relevance and our editorial preference, not who pays us more. Affiliate rate alone does not move a partner up the list.

What we earn. Specific commission amounts vary by partner and are governed by the affiliate networks we work with (Daisycon, Awin, Tradetracker, plus a few direct deals). We do not publish individual rates because they are confidential under our agreements with each partner.

Changes to this policy

If we change anything material, like adding a new sub-processor or a new category of data, we will update this page and, if you have an account, email you. The “Last updated” date at the top tells you what version you are reading.