Privacy statement

1. Who we are and principles

SafeStip is operated by MCCS B.V. (controller), Chamber of Commerce 81391706, De Dôme ("UFO"), Veluwezoom 5, 1327 AA Almere. For privacy questions: support@mccs.nl.

Principles: as little data as possible, anonymous spots, no reporting channel for individual cases and no sale of data.

Within a collaboration (for example a school or municipality) that party may be jointly or independently responsible for its own use. The division of roles is still being documented [to be completed].

2. Account and sign-in

You sign in with Google or Microsoft. We then receive your email address, a user ID and the provider used. We never see passwords.

Google and Microsoft independently process data such as IP address and device information during sign-in, under their own privacy terms.

Your profile (class, gender, age group) is stored only in your own browser and copied into each spot, not linked to your account.

3. Contact questions and messages

For a contact question we process: email address and provider, subject, messages, status and timestamps. Please do not send sensitive personal data or reports.

Message content is intended only for you and strictly authorised administrators. A notification to administrators contains no content, only that there is a new question.

4. Map spots: cooling-off period, account link and final spot

You choose a place on the map yourself. That chosen map position is not automatically where you are. SafeStip does not ask for your GPS location.

After placing it you have an intended 15-minute cooling-off period to edit the spot. By design, the link between your account and the spot is removed afterwards. This happens on later database actions; an automatic schedule has not been verified at this time; there is no hard guarantee that every spot is unlinked exactly after 15 minutes. How this works in practice still has to be technically checked.

The spot itself, including the indicated location, is kept after that.

A final spot (place, reasons, age group, gender, optional time and class) is kept for analysis. The public sees no spots, only rounded counts.

5. IP addresses and location data

We do not link an IP address or current location to your contact file or spot. Hosting, security and external services (Google Maps, Google/Microsoft sign-in) may however process IP addresses and metadata in their own technical logs.

To show an address for the chosen place we send those coordinates via our server to Google.

6. Purposes and legal bases (Article 6 GDPR) – still to be validated

Sign-in and account: performance of the service / legitimate interest [to be validated].

Anonymous spots and reports: legitimate interest or public task of the collaboration [to be validated].

Contact questions: legitimate interest in answering your question [to be validated].

Security, abuse prevention and audit log: legitimate interest / legal security obligation [to be validated].

7. Minors, vulnerable users and sensitive data

SafeStip may be used by young people, including under 16. That is why we ask for as little as possible and spots are anonymous. Whether parental consent is needed is still being reviewed [to be completed].

Reasons such as discrimination, sexual harassment or violence may indirectly point to special-category or criminal data. Spots have no free text; notes are staff-only and limited. Never mention names.

SafeStip is not a reporting service. In acute danger call 112; for domestic violence and child abuse call Veilig Thuis 0800-2000.

8. Access and logging for authorised administrators

Administrators have roles per collaboration; data of different collaborations is kept separate. Changes by administrators are recorded in an audit log without message content. Its completeness is still being reviewed.

9. Recipients, processors and international transfers

Hosting and database: Lovable and underlying cloud providers [processing agreement and location to be completed].

Map: Google Maps (Google). Sign-in: Google and Microsoft. These parties may process data outside the EEA; transfers are intended to rely on the EU-US Data Privacy Framework or standard contractual clauses [to be reviewed].

We do not sell data or share it for advertising.

10. Retention periods

Account–spot link: by design about 15 minutes, then removed; operation still to be technically checked, no hard guarantee.

Spot including indicated location: kept after the link is removed. Final anonymous spots: as long as the collaboration or measurement round runs [period to be completed].

Closed contact questions: intended period 12 months – automatic deletion not currently active and still to be verified.

Account and roles: while your account is active [period to be completed]. Audit log: [to be completed]. Technical logs: per provider [to be completed].

Backups: deleted data may remain temporarily in backups [period to be completed and verified].

11. Security

Encrypted connections, sign-in via Google/Microsoft, access rules in the database, separated collaborations, limits against spam and abuse, and an audit log. An independent security review has not yet been carried out.

12. Your rights

You have the right of access, correction, erasure, restriction, objection and, where applicable, data portability. Because spots are anonymous after the editing window, we usually can no longer link them to you.

Make your request via the contact portal or by email to support@mccs.nl. We usually respond within 1 month.

13. Cookies and external services

We use no advertising cookies. For sign-in and preferences (such as language and your profile) information is stored in your browser. Google Maps and the sign-in services may use their own cookies or techniques. Hosting visitor statistics may be kept without cookies [to be reviewed].

14. My messages

In My messages you see your own questions to the platform, decisions on your requests for extra spots and replies from your school or collaboration. There is no chat between students.

Question to the SafeStip platform: intended only for you and strictly authorised platform administrators. Your school does not see this conversation.

Message from your school or collaboration: its authorised staff (teachers and administrators) see your request or help signal and their replies. SafeStip platform administrators may have technical access. We record which replies you opened (read status); staff do not see that status in the app.

Replies and read status are deleted as soon as the related question, request or help signal is deleted, for example when a measurement round is restarted. A fixed retention period has not yet been set and no automatic deletion is running; this still has to be verified.

15. Automated decision-making (Article 22 GDPR)

We make no decisions with legal effect based solely on automated processing. Automatic limits (such as a maximum number of spots or spam filters) may temporarily block an action; an administrator can review this.

16. DPIA assessment

Status: privacy assessment in preparation. A formal data protection impact assessment (DPIA) has not yet been completed.

17. Complaint to the Dutch Data Protection Authority

Disagree with how we handle your data? Please contact us first. You can also file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

18. Versions and changes

Version 0.1 – draft, 12 November 2026. Changes are published on this page with a new date and version.