Belastingdienst

Who they are. Belastingdienst is the Dutch Tax and Customs Administration, part of the Ministry of Finance. The dossier also includes other Dutch government services signed with the same key: the DigiD login, the Berichtenbox mailbox and rijksoverheid.nl.

What is at stake. A tax authority knows almost everything about a person: income, employer, family, property. We found: 3 trackers on 2 websites; 16 third-party SDKs in 7 apps, 4 of them for advertising and analytics.

2websites analysed
7apps
16SDKs in its apps
4of them advertising & analytics
3trackers on its websites

Domains: belastingdienst.nl, rijksoverheid.nl · names: Belastingdienst

Websites

WebsiteTrackersFindingsPolicyChanges
belastingdienst.nl1nonepolicy text
not named in the policy text: ReadSpeaker
27.09.2026
rijksoverheid.nl2nonepolicy text
not named in the policy text: Государственная статистика, Опросная платформа правительства
29.09.2026

Apps

AppEmbedded SDKsSensitive permsDeclared in RuStore
Aangifte Inkomstenbelasting
nl.belastingdienst.maa2019.pub 7.0.0
Firebase Cloud MessagingFirebase CrashlyticsSentry
SDKs from non-EEA companies: 3
session recording possible
2—
Berichtenbox
nl.rijksoverheid.mbb.pub 3.0.16
Firebase Cloud MessagingGoogle Firebase AnalyticsSentry
of which advertising & analytics: 1
SDKs from non-EEA companies: 3
0—
Btw-Alert
nl.belastingdienst.btwalert 3.0.1
Microsoft App Center
of which advertising & analytics: 1
SDKs from non-EEA companies: 1
2—
CheckID voor DigiD
nl.rijksoverheid.checkid.pub 2.4.0
Sentry
SDKs from non-EEA companies: 1
session recording possible
3—
DigiD
nl.rijksoverheid.digid.pub 6.19.0
Firebase Cloud MessagingGoogle Firebase AnalyticsSentry
of which advertising & analytics: 1
SDKs from non-EEA companies: 3
session recording possible
4—
MijnGegevens
nl.rijksoverheid.mijngegevens.pub 2.0.4
Firebase Cloud MessagingGoogle Firebase AnalyticsSentry
of which advertising & analytics: 1
SDKs from non-EEA companies: 3
0—
Toeslagen
nl.belastingdienst.mkt.pub 3.10.2
Firebase Cloud MessagingFirebase Crashlytics
SDKs from non-EEA companies: 2
2—

A website and an app are treated as one company when the developer domain (from RuStore or the package name) or the signing certificate matches. Built automatically on 2026-10-20.