Technical audit · 2026-06-16

rechtspraak.nl

Website of the Dutch judiciary

Rechtspraak.nl is the website of the Dutch judiciary, the official portal for the courts. Homepage scan: 32 requests, 5 domains. The configuration is exemplary. The judiciary runs its web statistics on its own Piwik PRO engine, deployed on its own subdomain, and the policy explicitly states that the statistics are collected without storing behavior or personal data such as IP address. Additionally, a functional survey widget and an image-delivery network run. The scan shows no Google Analytics, no Facebook, no advertising, no session recording, and no third-party commercial trackers. Not a single cookie was set during the session. No violations were recorded.

Timeline of the leak

623 ms · own statistics on its own subdomain
The judiciary's own web statistics load, built on the Piwik PRO platform, deployed on its own subdomain.
643 ms · survey widget
A functional survey widget loads for collecting feedback.
1169 ms · pageview sent
The statistics tool sends pageview data without parameters tied to a visitor identifier. This is consistent with the anonymized mode described in the policy.
1243 ms · theme images from CDN
Styling images load from a content delivery network — functional page resources.
statistics anonymized, no cookie set
The policy explicitly states that the statistics are collected without storing behavior or personal data such as the user's IP address, and are therefore exempt from consent. Not a single cookie was set during the session.

Declared versus actual

Piwik (statistics, anonymized) — declared
Surveys — declared

Detected trackers

Context

www.rechtspraak.nl is the website of the Dutch judiciary: information on the courts, procedures, rulings, forms, and services for parties to proceedings. The data controller is the Council for the Judiciary (Raad voor de rechtspraak). The site is informational and service-oriented.

Scan: 32 requests to 5 domains, homepage, captured in a clean Edge browser without a VPN or ad blocker. The technical stack is restrained.

Who receives the data

There are no third-party commercial recipients.

The judiciary runs its web statistics on its own Piwik PRO engine, deployed on its own subdomain. Additionally, a functional survey widget and an image-delivery network run. The scan shows no Google Analytics, no advertising networks, no social media pixels, and no session recording.

A full banner for the statistics is not required here. The policy explicitly states that the statistics are collected without storing behavior or personal data such as the user’s IP address, and that personal data is not processed without unambiguous, explicit consent. This is consistent with an anonymized mode exempt from consent. Not a single cookie was set during the entire session.

Only anonymized in-house statistics and functional elements. Before any interaction, web statistics on the site’s own subdomain, without a visitor identifier, the survey widget, and image delivery all fire. The scan contains no Google analytics, no advertising domains, no social plugins, and no session recording.

Conclusion

Rechtspraak.nl is a model of a restrained configuration for the judiciary. Web statistics run on the site’s own engine on its own subdomain, with the policy explicitly describing an anonymized mode — without storing behavior or IP address — while the remaining external elements are functional: a survey widget and image delivery. There is no third-party advertising, no Google analytics, no social media pixels, and no session recording whatsoever, and no cookies are set. It’s worth separately noting that the detailed policy honestly describes what data is collected and that IP is not stored for statistics. The key takeaway for the reader: the judiciary can manage with its own anonymized statistics, and here that is achieved without a single third-party commercial tracker and is backed by a transparent policy. No violations were recorded.

Evidence
Original (audit)
HAR file: nl/rechtspraak-nl-2026-06-16.har
SHA-256: 5c3af938809d666d17fe1a82128bdfd91c0813df5d3b327bea097509474c39d5
HAR files are stored on EU infrastructure (Proton Drive). SHA-256 is published for integrity verification.