RU EN
www.
Technical audit · 2026-06-16

aivd.nl

Website of the General Intelligence and Security Service of the Netherlands
NL

Aivd.nl is the website of the General Intelligence and Security Service of the Netherlands. Homepage scan: 34 requests total, 2 domains. The configuration is extremely restrained, as befits a security service. The only external contact is the Dutch government's centralized web-statistics platform, Piwik PRO, running in anonymized mode. The scan shows no Google Analytics, no Facebook, no advertising, no session recording, no chatbots, and no third-party trackers whatsoever. Not a single cookie was set during the session. The policy confirms that visitor-behavior research is conducted anonymously. No violations were recorded.

Timeline of the leak

1510 ms · government web statistics
The Dutch government's centralized web-statistics platform, Piwik PRO, loads. This is the only external service on the site.
2008 ms · pageview sent
The statistics tool sends pageview data without parameters attached to a visitor identifier, consistent with anonymized mode.
statistics anonymized, no cookie set
The statistics tool is configured anonymously and, under the rules, is exempt from consent requirements. Not a single cookie was set during the session. No other external services appear in the scan.

Declared versus actual

✓ Government statistics (Piwik PRO) — заявлен

Detected trackers

Context

www.aivd.nl is the website of the General Intelligence and Security Service of the Netherlands (Algemene Inlichtingen- en Veiligheidsdienst). The data controller is AIVD, a government agency. The site is informational: information about the service’s activities, news, and materials.

Scan: 34 requests to 2 domains, homepage, captured in a clean Edge browser without a VPN or ad blocker. The technical stack is extremely minimal.

Who receives the data

There are no third-party recipients.

The only external service is the Dutch government’s centralized web-statistics platform, Piwik PRO, configured anonymously. The scan shows no Google Analytics, no advertising networks, no social media pixels, no session recording, no chatbots, and no other third-party services.

A full consent banner is not required here: the only statistics tool is anonymized and, under the rules, is exempt from consent. Not a single cookie was set during the entire session. The policy confirms that visitor-behavior research is conducted anonymously.

Only anonymized government statistics. Before any user interaction, a single external service runs — the government’s centralized web-statistics platform, in anonymous mode. The scan contains no Google analytics, no advertising domains, no social plugins, and no session recording.

Conclusion

Aivd.nl is a model of extreme restraint, fully consistent with the nature of the service. The only external service is the government’s centralized, anonymized web-statistics platform — and nothing else: no advertising, no third-party analytics, no social media pixels, no session recording, no chatbots. The key takeaway for the reader: a state security service runs its website without a single third-party tracker, relying solely on anonymized government statistics, and the policy confirms this. No violations were recorded.

Evidence
Original (audit)
HAR file: nl/aivd-nl-2026-06-16.har
SHA-256: 071929cc674ff52ab7589abf7aa8bd3123ec06052665e3a2d4f6d3db7b03dc75
HAR files are stored on EU infrastructure (Proton Drive). SHA-256 is published for integrity verification.