Cookie statement

What we place

Necessary. Signing in, showing your nickname in the top bar and remembering your language and theme choice. No consent is needed for these; without them the site does not work. Exactly which cookies these are is shown in the table below.

Statistics. Google Analytics 4 measures how the site is used — only after your explicit consent in the cookie banner. If you do not give it, these cookies are not placed and the script is not loaded — not “loaded but inactive”. Advertising features and Google Signals are off.

Marketing. We place no marketing cookies.

Storage in your browser

Our own code writes nothing to your browser’s localStorage, sessionStorage or IndexedDB. What the site remembers is in the cookies in the table below.

Fonts

The site’s fonts are on our own server. We load nothing from Google Fonts or any other font service, so your browser does not connect to another party for them.

Users under sixteen

We will show users under sixteen no optional categories. There is nothing to switch on there. This follows from Article 5 of the Dutch GDPR Implementation Act (UAVG).

Withdrawing consent

On your first visit a banner asks whether statistics may be switched on. The buttons “Yes, allow statistics” and “No, only necessary” are equal: equally visible, equally large, equally easy. We keep your choice for six months in the cookie wk-consent. You can change or withdraw it at any moment via “Cookie settings” at the bottom of every page; if you withdraw it, measuring stops and we delete the Google Analytics cookies.

Fingerprinting

We do not use fingerprinting and store no device hash. Article 11.7a of the Dutch Telecommunications Act treats reading device characteristics the same as placing cookies, and we see no legitimate purpose that would justify it.

The register

The table below, with the name, purpose, retention and party behind each cookie, is generated from our cookie register. The register is the source, this page the view. If anything changes, the table changes with it.

Sources

Telecommunicatiewet (BWBR0009950) — consent for reading device characteristics
Uitvoeringswet AVG (BWBR0040940)

Placed today

Name	Set by	Purpose	Category	Retention
theme	Wegkompas	Chosen theme (light or dark). Needed at server rendering so the page arrives in the right theme without a flash.	Strictly necessary	12 months
NEXT_LOCALE	Wegkompas (next-intl)	The chosen interface language.	Strictly necessary	Session (until you close the browser)
wk-naam	Wegkompas	The nickname you chose yourself, so the top bar can show that you are signed in. Readable by the page itself: the bar appears on every page and those pages are static. No real name, no session, no access — sign-in and access run through the separate session cookie.	Strictly necessary	12 months
sb-<project-ref>-auth-token	Supabase Auth	The user session (sign-in). A long session may be split over several cookies (…-auth-token.0, .1); during sign-in a PKCE verifier is briefly added (…-auth-token-code-verifier).	Strictly necessary	Up to 400 days; removed when you sign out
wk-consent	Wegkompas	The recorded choice from the cookie banner. The cookie itself is strictly necessary: without it we would ask again on every visit.	Strictly necessary	6 months
_ga \| _ga_<measurement-id>	Google Analytics 4	Acquisition analytics on public pages. Only after explicit consent; never for accounts under sixteen.	Statistics	13 months

Name	Set by	Purpose	Category	Retention
ph_<project-api-key>_posthog	PostHog (EU)	Product analytics. Only after explicit consent; not placed for accounts under sixteen.	Statistics	12 months

Name

Set by

Purpose