# Dean cookie policy and consent choices Source: https://heydean.nl/en/cookies This cookie policy explains how Dean uses cookies, local storage, pixels, tags and similar technologies on heydean.nl. It also explains when consent is required and how you can refuse or withdraw a choice. Last updated: 11 September 2026 ## 1. Controller and legal framework Dean Radar, a sole proprietorship (eenmanszaak) established in Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under number 83770089 and with VAT number NL003868118B20, is responsible for technologies placed or read on heydean.nl. Questions can be sent to help@heydean.nl. Cookies also means local storage, session storage, pixels, tags, SDK-like browser technologies and similar identifiers. Storing or reading information on your device is governed, among other things, by Article 11.7a of the Dutch Telecommunications Act via https://wetten.overheid.nl/BWBR0009950/2025-07-01/0/Hoofdstuk11/Paragraaf11.1/Artikel11.7a and, where personal data are processed, by the GDPR via https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 ## 2. Essential storage Essential cookies and similar storage are needed to provide a service you request or to make communication technically possible. This includes, for example, authentication and session data, security, fraud prevention, load balancing, error handling, forms, payment and remembering your cookie choice. Dean also stores that choice server-side as an essential consent record, without advertising identifiers, for up to twelve months. We do not request separate consent for essential storage where the statutory exemption applies. If you block essential cookies or local storage, sign-in, security, forms, Checkout or other parts of the Service may not work properly. ## 3. Preferences and functional storage Dean may use limited local storage to remember a setting you actively choose, such as language or theme. If functional storage is not strictly necessary, we ask for consent where required by law. Actively choosing a setting may be necessary to apply that choice for the session or an appropriate period. Functional storage is not intended to track your browsing for advertising. You can remove local storage through your browser, which may mean that preferences need to be set again. ## 4. Statistics We activate statistics cookies, local storage and similar identifiers only after your statistics consent. They let us measure limited use of the public website, onboarding and conversions in order to understand and improve the Service. After statistics consent, Dean may use Google Analytics 4 for public-site, acquisition and conversion measurement. PostHog EU Cloud may process pseudonymous onboarding events and masked recordings after statistics consent. Dean disables automatic page views, broad autocapture, network recording and error capture in PostHog; recordings are limited to onboarding and inputs are masked. Dean does not send names, email addresses, verification codes, precise location, neighbourhood IDs, sensitive URLs, Stripe IDs or free-form error text to PostHog. On city pages, limited interactions with recent listings may be measured, such as card position, property type, rent band, age in days and interaction type. For this purpose, Dean does not send name, email address, search profile, exact address, listing URL, image, provider, exact rent, Stripe customer ID or precise location to Google Analytics 4. ## 5. Marketing and server-side conversion measurement We activate marketing cookies and similar technologies only after your marketing consent. With that consent, Google Ads, Meta Pixel and the Meta Conversions API may be used for advertising measurement, retargeting and measuring conversions. Server-side conversion measurement is not a cookie on your device, but we process it only where the relevant context has marketing consent. Google Analytics 4 may be used for Google Ads audiences only where you have given both statistics and marketing consent. For enhanced conversions, an email address you provide may be processed in encrypted or hashed form in accordance with the configuration of the relevant service. Automatic recovery emails for an unpaid account do not use a marketing cookie. They are email communications and, where applicable rules permit them, are handled as described in the privacy policy. You can unsubscribe from messages that are direct marketing. ## 6. Giving, refusing and withdrawing consent On your first visit, you can keep essential technologies and give separate consent for statistics and marketing, or refuse non-essential categories. We do not place or activate those categories before the required consent has been obtained. You can later change or withdraw your choice through the cookie settings available from this page. After withdrawal, we stop new processing in the withdrawn category and, where technically possible, remove or block Dean-managed non-essential local storage. Withdrawal does not retrospectively affect data processed lawfully before then. You can also remove or block cookies and local storage in your browser. That can remove previous identifiers, but does not always prevent processing by external services outside your browser. Please also consult the settings and privacy information of the relevant external party. ## 7. External services and pixels Supabase may process essential authentication and session data when you sign in. Cloudflare may use essential hosting, security and performance technologies. Cloudflare Turnstile may use essential security signals and similar technologies to protect forms against spam and bots. Further information is available at https://www.cloudflare.com/turnstile-privacy-policy/ Stripe Checkout and the Stripe customer portal are environments hosted by Stripe. Stripe and the payment method you select may use their own essential technologies there for payment, security, authentication and fraud prevention. Stripe's and the payment method's own cookie and privacy rules also apply to those environments. When you leave Dean for an external rental listing, that provider's cookie and privacy rules apply. Dean has no control over technologies subsequently used by an external landlord, letting agent, platform or other provider. ## 8. Retention periods We generally retain the cookie preference itself for up to twelve months, after which we may ask for consent again. Session and security cookies generally expire at the end of the session or when they are no longer needed for security. We retain PostHog onboarding events for up to twelve months and masked onboarding recordings for up to thirty days. Google Analytics 4 identifiers may remain for up to two years when you give statistics consent. The duration of Google, Meta or other external identifiers may also be set by that party's configuration and policy. Names, providers and exact durations may change if the technical configuration changes. We update the settings and this policy before using new non-essential technologies without the required consent. ## 9. Changes and contact We may change this cookie policy when law, technology, suppliers or the Service changes. The date at the top shows the latest substantive update. For questions about cookies, local storage, pixels or consent, contact help@heydean.nl. For personal-data processing, please also read the privacy policy.