Postcode Loterij Security & Privacy Scorecard
Android
Activity in the app is tracked by Firebase Analytics and a marketing platform called Selligent, which can be used to target users with personalized messages. Some data is stored in ways that could be better protected. Third-party services including mapping and authentication tools also receive data about app usage.
Best for
Lottery players who want to check tickets and results
Findings
- 0 critical
- 4 high
- 4 medium
- 4 low
- 2 info
1 issue identified across security and privacy analysis.
Top security issues
- Unencrypted OAuth Tokens in SharedPreferences
- Unencrypted SQLite Databases
- Selligent SDK Private Key Exposed in Application Resources
Top privacy issues
- Pre-Consent Analytics Initialization
- Selligent Marketing SDK Data Collection Without Consent
- Advertising ID Collection Without Consent
Full analysis
Postcode Loterij
App: Postcode Loterij
Version: 1.6.2 (7972)
Analyzed: March 7, 2026
Platform: Android
What This Means for You
Activity in the app is tracked by Firebase Analytics and a marketing platform called Selligent, which can be used to target users with personalized messages. Some data is stored in ways that could be better protected. Third-party services including mapping and authentication tools also receive data about app usage.
Recommendation: Acceptable
Best For: Lottery players who want to check tickets and results
Key Findings
Data Security - 2 findings (1 high, 1 medium)
Network Security - 1 finding (1 medium)
Code Safety - 0 findings
Privacy - 2 findings (2 high)
Privacy Concerns
What Data is Collected
The app collects usage activity, device information, and behavioral patterns through Firebase Analytics and Selligent. This data is used to monitor how users interact with the app and to build a profile that informs personalized messaging.
Third-Party Data Sharing
User activity is shared with a range of third-party services: Selligent (marketing and targeted messaging), Firebase (analytics, crash reporting, performance monitoring, and remote configuration), Mapbox (mapping), Auth0 (authentication), Google Play Services, and Storyblok (content delivery). Each of these services receives information about how users interact with the app.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 72/100 |
| Privacy | 65/100 |
| Data Security | 58/100 |
| Network Security | 96/100 |
| Code Safety | 92/100 |
| Data Collection | 74/100 |
| Data Sharing | 82/100 |
| User Control | 88/100 |
Positive Security Features
- Data transmitted between the device and the app's servers is well protected
- The app's code is built on solid foundations with well-maintained components
- Users retain meaningful control over their data and app permissions
Areas for Improvement
- Some data the app stores on the device could be better secured, which may matter if the phone is accessed by someone else.
- Selligent collects behavioral data that goes beyond what is needed to run lottery features, and uses it to send personalized messages.
- User data flows to a large number of third-party services, increasing the number of companies that hold information about how the app is used.
About This Analysis
This scorecard is generated through automated static analysis of the app's code and observed behavior. Scores reflect security and privacy practices at the time of analysis and may not capture every possible risk or benefit.
App Details
- App Name: Postcode Loterij
- Package ID: info.postcodelottery.npl
- Version: 1.6.2 (7972)
- Scan Date: March 7, 2026
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 68/100 |