Privacy policy

The short version

On an ordinary visit this website sets no cookie and requires no account or registration. The calculations run entirely in your browser: the salary you type is used to compute a result on your own device and is never sent to us or to anyone else. Visits are measured with Google Analytics 4, running cookieless — described below, together with the one flag this site does write if you ask it to.

Who is responsible

The controller for this website, in the sense of the General Data Protection Regulation (GDPR), is the operator of NetLoon. Until the site launches under its own domain you can reach us for any privacy question at info@netloon.nl (a placeholder address, published in final form before launch). The Dutch supervisory authority for data protection is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), to which you have the right to lodge a complaint.

What we process

As with any website, our hosting provider may process technical data needed to deliver the pages securely — such as your IP address in temporary server logs. That processing rests on our legitimate interest in operating a safe, working site (Article 6(1)(f) GDPR). Beyond that, on an ordinary visit only one thing is stored, and it stays on your device: if you dismiss the banner suggesting the site in your other language, that choice is kept in your browser’s local storage so the suggestion does not keep reappearing. It contains no name, no email and no identifier that could build a profile.

There is one further entry, and only if you ask for it: gr_int, our own exclusion for internal visits, so that our test traffic does not end up in the figures. It is written when a page is opened with ?internal=1 appended — as a cookie with a lifetime of one year, and additionally in local storage — and the measurement code reads it on every page view. On an ordinary visit nothing is written. It holds a single flag and nothing about you, and you delete it by clearing this site’s data in your browser.

Visit measurement

Visits are measured with Google Analytics 4. Google Consent Mode v2 holds every storage signal at "denied" and the default is the same for every visitor, in every country — this site carries no consent message that could change it, so the tag runs cookieless, permanently. Google receives the page address, where the visit came from, the IP address (from which it derives an approximate location) and general device and browser characteristics, with no cookie and no identifier that recognises you across visits. Google stores nothing on your device; the gr_int flag described above is written by this site’s own code, and only after you open a page with ?internal=1 appended.

No advertising is served. If that changes, this policy will be updated first with the specific data each service processes, the recipients, the retention periods and the transfer safeguards. Google LLC is certified under the EU–US Data Privacy Framework, the mechanism the European Commission recognises for transfers to certified US companies. See the cookie policy for the per-service detail.

Your rights

Under the GDPR you have the right to access the personal data concerning you, to have it rectified or erased, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of what came before. To exercise any of these rights, contact us at the address above; you may also complain to the Autoriteit Persoonsgegevens.

Last updated: aug 2026.

This text is still in preparation.