Deleting your data

Last updated: 3 November 2026

This is a translation of the Dutch page. If the two differ, the Dutch version applies.

1. Remove one account from your phone

In the app: Settings → the account → Remove.

This deletes the secret key from your phone at once and unlinks the phone from that account on the server. The application concerned can no longer send you approval requests, and your codes for it stop working.

2. Remove everything from your phone

In the app: Settings → Reset this phone.

This erases every secret key and the phone's link. Nothing usable is left on the phone.

3. Ask us to erase the record on the server

Steps 1 and 2 unlink your phone and delete the secret key. A record of the link and the security log stay until they age out (see below). To have them erased sooner, email privacy@wwwveilig.nl from the address linked to the account, or ask the operator of the application you sign in to.

Tell us which application it concerns, so we can find it. We answer within 30 days, as the GDPR requires.

What is deleted, and when

• Secret key on the phone: at once when you remove the account in the app (after an erasure request it is already gone).
• Secret key on the server: at once, in both cases.
• Push notification token: at once, in both cases.
• Link between phone and application: at once, in both cases.
• Security log (event, time, IP address): kept after a removal in the app and deleted automatically after 180 days; deleted at once after an erasure request.

We cannot delete your account with the application you sign in to: that is a separate system, run by whoever operates it. Removing two-step verification does not close that account.

More about what the app stores: the privacy statement of WWWveilig Authenticator.