DRAFT, pending legal review.

Privacy Policy

Last updated: 2026-06-08

1. Who we are

Aid Audit is an informational eligibility-checking tool for government benefits in Ireland, the United Kingdom, France and the Netherlands. For privacy-related questions, contact privacy@aidaudit.eu.

Data controller: [LEGAL ENTITY NAME], [registered address], [company / charity registration number], [member-state of establishment]. The operating entity will be filled in here at launch. Until then, treat the controller as the natural person responsible for the deployment you are visiting, reachable at the address above.

2. What data we collect

The questionnaire asks about the following categories. The exact questions vary by country; the categories are consistent.

Residence: citizenship, time in country, BSN/PPS-equivalent (yes/no, not the number itself).
Household composition: adults, children with age and education flags.
Disability and health: long-term illness, disability rating, work-injury history, MDPH/PIP/WIA/Wajong descriptors. This is special-category data under Article 9 GDPR (see section 3).
Income and assets: earnings, partner's earnings, capital, vermogen, toetsingsinkomen.
Employment: status, weekly hours, contribution history (PRSI/NI bucket).
Housing: tenure, rent, mortgage.
Recent events: bereavement, recent move, parental leave, recent job loss.

We do not collect your name, email address, exact date of birth, postal address, identity-document numbers, or payment details.

3. Special-category data

Disability and health information is "special-category data" under Article 9(1) of the EU General Data Protection Regulation. We only process it where you have given us explicit consent, Article 9(2)(a), by clicking "I consent" before the disability section starts. You can decline; the disability section will be skipped, and the corresponding benefits will not appear in your report. You can revoke consent at any time using the "Start over" button.

4. Where your data lives

Your answers are stored in your browser's localStorage, never sent to our server. We don't have a server that receives questionnaire data; the entire eligibility calculation runs in your browser.

Note that anyone with physical access to your device or your browser profile can read your localStorage. If you're using a shared computer, click "Start over" before logging out, or use private/incognito browsing.

5. How long we keep it

Until you delete it. Click "Start over" from the questionnaire overview to remove all saved answers, or clear your browser's storage for our domain. Because there is no server, we cannot retain or restore data on your behalf.

6. Cookies, tracking, and crash reporting

We use only essential localStorage for persistence (your saved answers and the dismissal state of the disclaimer bar). We do not use analytics cookies, advertising trackers, or third-party scripts on this site.

Crash reporting (Sentry). When the site crashes or hits an unexpected error we send a diagnostic event to Sentry, our crash-reporting sub-processor (Functional Software, Inc., trading as Sentry, San Francisco, USA). The legal basis is our legitimate interestin keeping the service correct and usable for vulnerable users (Article 6(1)(f) GDPR); the necessity test is met because a crash that goes unfixed disproportionately harms exactly the users this site exists for. We rely on the EU-US Data Privacy Framework and Sentry's Standard Contractual Clauses for the international transfer. You can object to this processing at any time at privacy@aidaudit.eu.

Before any event leaves your browser it passes through a strict scrubber (see sentry.scrub.ts in our open-source repository). The scrubber:

removes your IP address (event.user.ip_address) and disables Sentry's default PII collection;
strips query strings from every URL in the event (request URL, referrer, breadcrumbs);
drops cookies, request body, headers (Cookie, Referer), and free-form extra payloads;
recursively redacts every object key whose name matches a sensitive answer field anywhere in the event tree. The redaction list covers residence, immigration status, refugee / asylum status, health and disability (including MDPH / PIP / WIA / Wajong descriptors), household composition, earnings, capital, postcodes / INSEE codes, contribution history, BSN / PPS markers, and the free-form answer payload as a whole;
for session replays: replays are off in the normal case, fire only on error, and have all text masked, all inputs masked, and all media blocked.

We deliberately err on the side of losing debugging context rather than leaking one vulnerable user's status. You can read the exact scrubbing logic, the list of sensitive fields, and the Sentry sample rates in the open-source repository under sentry.scrub.ts and the three sentry.*.config.tsfiles. Sentry's sub-processor and security documentation lives at sentry.io/security and sentry.io/legal/dpa.

Crash reporting is disabled when the NEXT_PUBLIC_SENTRY_DSN environment variable is unset (local development, self-hosting). On the deployment you are visiting, you can confirm whether Sentry is active by checking the network panel of your browser's developer tools for requests to *.ingest.sentry.io.

7. Your rights

Under GDPR you have the right to:

Accessyour data: you already have it, in your browser's localStorage. Open developer tools → Application → Local Storage to view.
Erasure: click "Start over" from the questionnaire, or clear browser storage for our domain.
Lodge a complaint with your local data-protection authority. The full list is published by the European Data Protection Board: edpb.europa.eu/members.

We do not transmit data, so we have nothing to provide in response to a data-subject access request beyond what is already in your browser.

8. Changes to this policy

We will update the "Last updated" date at the top of this page when the policy materially changes. If the change affects how we process special- category data, you may be re-prompted for consent.

9. Disclaimer

Aid Audit provides informational guidance only. It is not legal advice, not a benefits-application service, and not a substitute for the official agencies (DSP, DWP, HMRC, CAF, CPAM, MDPH, France Travail, CARSAT, Belastingdienst, SVB, UWV, gemeenten, DUO). Final eligibility decisions and payments rest entirely with those agencies.