Technical audit · 2026-06-16

nctv.nl

Website of the National Coordinator for Counterterrorism and Security

Nctv.nl is the website of the Dutch National Coordinator for Counterterrorism and Security, which handles counterterrorism, national security, and crisis management. Homepage scan: 43 requests, 3 domains. The configuration is exemplary and extremely restrained. The only external service is the government's centralized web-statistics platform, Piwik PRO, running in anonymized mode. Everything else is served from the site's own domain. The scan shows no Google Analytics, no Facebook, no advertising, no session recording, and no third-party commercial trackers. Not a single cookie was set during the session. No violations were recorded.

Timeline of the leak

1612 ms · government web statistics
The government's centralized web-statistics platform loads, built on Piwik PRO in anonymized mode. This is the only external service on the page.
2014 ms · pageview sent
The statistics tool sends pageview data without parameters tied to a visitor identifier, consistent with anonymized mode.
statistics anonymized, no cookie set
The statistics tool is configured anonymously and, under the rules, is exempt from consent. Not a single cookie was set during the session. No other external services appear in the scan.

Declared versus actual

Government statistics (Piwik PRO) — заявлен

Detected trackers

Context

www.nctv.nl is the website of the Dutch National Coordinator for Counterterrorism and Security (NCTV): terrorist threat assessment, national security coordination, cybersecurity, and crisis management. The data controller is NCTV, part of the government apparatus. The site is informational.

Scan: 43 requests to 3 domains, homepage, captured in a clean Edge browser without a VPN or ad blocker. The external footprint is kept to a minimum.

Who receives the data

There are no third-party commercial recipients.

The only external service is the government’s centralized web-statistics platform, built on Piwik PRO in anonymized mode. Everything else is served from the site’s own domain. The scan shows no Google Analytics, no advertising networks, no social media pixels, and no session recording.

A full banner for the statistics is not required here: it is configured anonymously — it anonymizes the IP address and does not intrude on privacy, and is therefore exempt from consent. Not a single cookie was set during the entire session.

Only anonymized government statistics. Before any interaction, the government’s centralized, anonymized statistics fire. The scan contains no Google analytics, no advertising domains, no social plugins, and no session recording.

Conclusion

Nctv.nl is a model of an extremely restrained configuration, fitting for a national security body. The only external service is the government’s anonymized web statistics; everything else is served from the site’s own domain. There is no third-party advertising, no Google analytics, no social media pixels, and no session recording whatsoever, the statistics tool anonymizes IP, and no cookies are set. The key takeaway for the reader: a security coordinator can manage with its own anonymized statistics and a minimal external footprint, and here that is achieved without a single third-party commercial tracker. No violations were recorded.

Evidence
Original (audit)
HAR file: nl/nctv-nl-2026-06-16.har
SHA-256: 2f9af027c04a0838b6af5d10e08d7d0c930d4b8a8925fbbb217f36ef7dfba88b
HAR files are stored on EU infrastructure (Proton Drive). SHA-256 is published for integrity verification.