Security

Security by keeping it small.

The best data protection is not collecting data. This site works without accounts, without cookies and without external scripts, stores as little as possible for as short as possible, and runs entirely inside the European Union.

Technically: every page is served with a strict Content Security Policy and modern security headers, all traffic is encrypted, submitted addresses are checked server-side, rate limits protect the forms, and check results expire automatically after thirty days. The full technical description lives on the Dutch security page.

Found a vulnerability? We genuinely want to know. Mail security@huurgelijk.nl, or check /.well-known/security.txt for the current disclosure details. We respond quickly and will never take action against a good-faith reporter.