Fifteen reusable utilities. One trusted system.

• OAIC — make a privacy complaint✓ Verified

  Lodge a complaint with the Office of the Australian Information Commissioner.

  Complaint · AU · Updated 2026-05-12

  Open
• IDCARE — identity & cyber support✓ Verified

  Free national identity & cyber support service for individuals.

  Identity Theft · AU · Updated 2026-06-01

  Open
• Scamwatch — report a scam✓ Verified

  Report scams to the ACCC's national scam reporting platform.

  Scams · AU · Updated 2026-06-19

  Open
• eSafety Commissioner✓ Verified

  Reporting tools for image-based abuse, cyberbullying, and adult cyber abuse.

  Online Safety · AU · Updated 2026-05-30

  Open
• Australian Cyber Security Centre✓ Verified

  Report cybercrime and get incident guidance.

  Cyber · AU · Updated 2026-04-22

  Open
• NSW Information & Privacy Commission✓ Verified

  State-level privacy complaints for NSW.

  Complaint · NSW · Updated 2026-03-11

  Open
• OVIC — Victorian privacy regulator✓ Verified

  Victorian information privacy oversight.

  Complaint · VIC · Updated 2026-02-19

  Open
• 1800RESPECT✓ Verified

  24/7 confidential support for sexual assault, family and domestic violence.

  Crisis · AU · Updated 2026-06-25

  Blocked
• Lifeline 13 11 14✓ Verified

  24/7 crisis support and suicide prevention.

  Crisis · AU · Updated 2026-06-25

  Blocked
• Google — remove information from Search✓ Verified

  Request removal of personal info from Google Search results.

  De-indexing · INTL · Updated 2026-06-02

  Open

Do not enter sensitive information. This widget keeps your input on your device only.

• APN-CERT-2026-001284

  australianprivacynetwork.com.au · issued 2026-06-27 · expires 2027-06-27
  valid
• APN-CERT-2026-001283

  apnvault.com.au · issued 2026-06-27 · expires 2027-06-27
  valid
• APN-CERT-2026-000931

  privacyatlas.com.au · issued 2025-11-02 · expires 2026-11-02
  valid
• APN-CERT-2025-000482

  legacy.apn.example · issued 2025-01-18 · expires 2026-01-18
  expired

• Unique passwords on email + bank + government accounts
• 2FA enabled on email and bank
• Reviewed Google account recovery settings
• Removed phone number from public socials
• Checked for breaches at haveibeenpwned
• Set up emergency contact on phone

Do not enter sensitive information. This widget keeps your input on your device only.

• Inventory of online accounts (email, banking, socials)
• Inventory of devices and where they're stored
• List of subscriptions and recurring payments
• Cloud storage providers and access notes
• Crypto assets — wallet location only (never seeds)
• Named executor with contact details
• Printed copy stored securely offline

Educational only. No financial advice. APN does not custody, sign, or recover assets.

• Never share your seed phrase. APN will never ask for it.
• Treat unsolicited 'recovery service' offers as scams.
• Assume on-chain activity is permanent and traceable.
• Separate identity from address: avoid linking KYC to public wallets.
• Verify token / certificate IDs against the APN public ledger.

Every APN widget ships behind a sandboxed iframe, a strict Content-Security-Policy, validated outbound URLs, and plain-text sanitisation. Copy the snippet that matches your widget's sensitivity.

<iframe src="https://widgets.australianprivacynetwork.com.au/embed/trust-badge" title="APN trust-badge" sandbox="allow-scripts allow-forms allow-same-origin" referrerpolicy="no-referrer" loading="lazy" style="width:100%;border:0;min-height:360px"></iframe>

Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://*.australianprivacynetwork.com.au; frame-src 'self' https://widgets.australianprivacynetwork.com.au; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'

Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:; connect-src 'self'; form-action 'self'; base-uri 'none'; frame-ancestors https:

• All outbound links pass safeUrl() — only http(s)/mailto are allowed; javascript:, data:, vbscript:, file: are blocked.
• All third-party strings pass sanitizeText() — control characters stripped, length-clamped, never injected as HTML.
• External links use rel="noopener noreferrer nofollow" and referrerpolicy="no-referrer".
• Sensitive widgets keep state in localStorage on the visitor's device; nothing is posted to APN.
• Iframes must set referrerpolicy="no-referrer", loading="lazy", and the sandbox tokens above. Never add allow-top-navigation or allow-popups-to-escape-sandbox.