WWWveilig 2FA API · https://api.wwwveilig.nl
Deleting your data — WWWveilig Authenticator
WWWveilig Authenticator has no account to close: there is no username or password, and the app is only ever linked to applications you already use. You can remove your data in three ways.
1. Remove a single account from your phone
In the app: Settings → the account → Remove.
This immediately deletes the secret key from your phone and unlinks that phone from the account on the server. The application concerned will no longer be able to send you approval requests, and your codes for it stop working.
2. Remove everything from your phone
In the app: Settings → Reset this phone.
This erases every secret key and the device's identity. Nothing usable is left on the device.
3. Ask us to erase the server-side record
Sections 1 and 2 unlink your device and delete the secret. A record of the enrollment and the security log remains until it ages out (see below). To have it erased sooner, e-mail privacy@wwwveilig.nl from the address linked to the account, or ask the operator of the application you were signing in to.
Tell us which application it concerns, so it can be located. We answer within 30 days as required by the GDPR.
What is deleted, and when
| Data | On removal in the app | On an erasure request |
|---|---|---|
| Secret key on the phone | Immediately | Already gone |
| Secret key on the server | Immediately | Immediately |
| Push notification token | Immediately | Immediately |
| Link between phone and application | Immediately | Immediately |
| Security log (event, time, IP) | Kept, auto-deleted after 180 days | Deleted |
Note that we cannot delete your account with the application you were signing in to — that is a separate system, run by whoever operates it. Removing two-factor authentication does not close that account.