Privacy statement
Not final yet
This statement is complete in substance and the company details are in it. The text has not been read by a lawyer yet, so no rights can be derived from it until it has.
Familiepagina is a private place for one family. This statement explains which personal data we process, why, how long we keep it and what say you have in it. It is written the way the rest of this site is written: in plain sentences, with nothing tucked away.
Who processes your data
The data controller is:
| Company | XS B.V. |
|---|---|
| Product | Familiepagina (familiepagina.nl) |
| Chamber of Commerce | 42066390 |
| VAT number | NL869553483B01 |
| Address | Hoofdstraat 56b, 2171 AV Sassenheim, the Netherlands |
| support@familiepagina.nl |
What we process, and why
| What | What for | Legal basis |
|---|---|---|
| E-mail address | Signing in — there are no passwords, you get a link in your mail. Also invitations and messages about the service. | Performance of the contract |
| Name and profile photo | So your family can see who is who. | Performance of the contract |
| Date of birth | Birthdays in the calendar. Optional; leave it empty and nothing appears. | Performance of the contract |
| Phone number and address | Your family's addressbook. Optional. Anyone in the family may add or correct these, and a correction carries the name of whoever made it. | Performance of the contract |
| Language and timezone | The site in your own language, and the daily mail at a reasonable hour. | Performance of the contract |
| What you post | Posts, replies, photos, films, stories, calendar entries, discussions, documents in the vault. This is the service itself. | Performance of the contract |
| Data inside your photos | We read the capture date and the orientation from a photo, so it lands in the album in the right order and the right way up. | Performance of the contract |
| When you were last here | So we can show what is new since your previous visit. | Performance of the contract |
| IP address in our error logs | Fixing faults and preventing abuse. | Legitimate interest |
| Actions taken by our staff | An audit trail of what we ourselves do inside your family, so it can be checked afterwards. | Legitimate interest |
What we don't do
- No advertising, and no profiles built to aim advertising at.
- No selling data on, to anyone, ever.
- No automated decision-making and no profiling.
- No AI reading, summarising or learning from your posts and photos.
We do use AI tools ourselves to build and test Familiepagina. They make the software; they do not run inside the product and they do not read what you put into it.
Who else sees anything
As few parties as possible, and only because the service needs them. They may do nothing with your data that we have not instructed.
| Party | What for | Where |
|---|---|---|
| Hetzner | The servers Familiepagina runs on, and where your photos, films and documents live. | Falkenstein, Germany |
| TransIP | The domain and nameservers for familiepagina.nl. | The Netherlands |
| Resend | Sending our e-mail: the sign-in link, invitations and the daily mail. Resend receives the recipient's address and the contents of that message. | United States — under the EU-US Data Privacy Framework, for which Resend is certified, and additionally under the Standard Contractual Clauses in our data processing agreement with them |
Resend in turn engages parties of its own to deliver the mail; it keeps that list public at resend.com/legal/subprocessors. Nobody else. No analytics service, no ad network, no content delivery network. This site's fonts and scripts are served from our own server, precisely so that opening a page does not make your browser knock on anyone else's door.
Where your data lives
On a server in Falkenstein, Germany, with Hetzner. Inside the European Union, in other words, under the same privacy law that applies here. Photos, films and documents sit on that server's own disk, not with a cloud service and not scattered around the world. The only thing that leaves the EU is the e-mail we send on your behalf, because our mail provider is American.
How long we keep it
- Your account: as long as you have one. Close it and we delete your data.
- What is in a family: as long as that family exists.
- A family nobody comes back to: twelve months after the last visit, or twenty-four if it was ever paid for. We warn you well in advance, so you can still ask us for your data. After that it is really deleted, files included.
- Error logs containing an IP address: twelve months.
- Our staff audit trail: as long as the account it concerns exists.
Cookies and what we store on your device
There is not one tracking cookie on this site. No advertising cookies, no Google Analytics, no third-party cookie of any kind. That is also why you see no cookie banner here: there is nothing to ask consent for.
What we do put on your device is listed below. All of it is needed to deliver the service you asked for, or it is a preference you set yourself.
| Name | Kind | What for | How long |
|---|---|---|---|
| connect.sid | Cookie | Keeps you signed in. It holds only a key to your session on our server, nothing about you. | 30 days |
| cp-lang | Cookie | Remembers the language you chose yourself at the foot of the page. | 1 year |
| cp-theme | Local storage | Whether you want the site light or dark. | Until you clear it |
| cp-sidebar-collapsed | Local storage | Whether you had the sidebar collapsed. | Until you clear it |
| cp-admin-theme | Local storage | The same, but for the admin screens. Our own staff only. | Until it is cleared |
| cp-video-upload:… | Local storage | Where a film upload had got to, so an interrupted upload can carry on instead of starting again. | Until the upload finishes |
We count page views on our own server: one number per page per day. There is nothing in it that leads back to you — no cookie, no script in your browser, no IP address.
Everything above falls under the exemption in article 11.7a of the Dutch Telecommunications Act, which requires consent only for what is not strictly necessary. If we ever wanted to store something that falls outside it, we would ask you first — but by then something would have changed about what this product is.
How we secure it
- There are no passwords. You sign in with a link that works once and then expires, so there is no password here to steal.
- All traffic runs over an encrypted connection.
- The cookie that keeps you signed in cannot be read by scripts and is only sent over https.
- Photos, films and documents can only be fetched by people in the same family. There are no public links and no search engine can reach them.
Children
There are children on a family page — that is the point. Their photos and birthdays are posted by adult relatives, who are responsible for doing so. You can create your own account from the age of sixteen, or younger with a parent's consent. If a parent wants something about their child removed, we remove it; anyone in the family can also do that themselves.
Your rights
You have the right to see your data, have it corrected, have it deleted, have the processing restricted, object to it, and receive it in a usable file. Mail us at support@familiepagina.nl and we answer within a month. We will not ask for a copy of your passport; we send the answer to the address the account is on.
Ask us for your data and we make the file for you.
Complaints
If we cannot resolve it between us, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). That is your right; we would rather you mailed us first, but it is up to you.
Changes
If anything material about this statement changes, members hear about it by mail before it takes effect. The date this version was adopted is at the foot of the page.