Privacy policy
Last updated: 20 October 2026
This policy explains what data IDTrack Online (the “app”) processes, available at idtrack.online, for which purposes, and what rights you have. The app is designed to process as little data as possible.
1. Data controller
IDTrack Online — idtrack.online. For any data protection question, write to [email protected].
2. What data we process
- Tracking numbers: sent to specialised tracking providers (17TRACK, AfterShip and TrackingMore) to retrieve the shipment status. They are not stored on our servers: they are only kept in an in-memory cache for a few minutes to avoid repeating lookups.
- Technical request data: when contacting those providers, the IP address making the request is transmitted, as required to provide the service and prevent abuse.
- Saved packages and preferences: kept in your device’s local storage (localStorage). We cannot access it.
- Cookie choice: stored so we do not ask you again on every visit.
- Analytics (optional): if you accept, visits are recorded in aggregate with Umami, self-hosted on our own server. Umami does not use cookies, does not build profiles and anonymises the IP address. No advertising, no cross-site tracking.
3. Legal basis
- Consent (Art. 6(1)(a) GDPR) for analytics. You may withdraw it at any time.
- Performance of the requested service (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f)) to look up the shipment status with the tracking providers.
- Consent exemption (Art. 5(3) ePrivacy Directive) for strictly necessary storage: keeping your packages and settings is required to provide the service you request.
- Legitimate interest (Art. 6(1)(f) GDPR) in keeping the service secure and preventing abuse.
4. Cookies and local storage
The app uses no advertising or third-party cookies. It only uses necessary local storage and, with your permission, cookieless analytics:
| Name | Type | Purpose | Duration |
|---|---|---|---|
| gt_settings | LocalStorage (technical) | Theme, language and units | Until you delete it |
| gt_saved | LocalStorage (technical) | Packages you save | Until you delete it |
| gt_consent | LocalStorage (technical) | Remembering your cookie choice | Until you change it |
| Umami | No cookies | Aggregate visit statistics | Aggregated data |
You can accept or reject analytics in the cookie notice and change your choice at any time from Settings → Cookies.
5. Recipients and transfers
We do not sell or share your data for advertising. To resolve a lookup, the tracking number is sent to the tracking providers delivering the service: 17TRACK, AfterShip and TrackingMore, acting as data processors. Depending on the carrier and provider used, the lookup may involve an international transfer (United States or China) covered by the European Commission’s Standard Contractual Clauses. The website and analytics run on our own server in the European Union.
Each provider applies its own privacy policy, available on its website, where you can check its retention periods and sub-processors.
6. Retention
Data stored in your browser remains until you delete it (from Settings or by clearing site data). Tracking lookups are cached in memory for at most 10 minutes and external providers keep them under their own policies. Aggregated statistics are purged periodically.
7. Your rights
You may exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw your consent, by writing to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
All traffic is encrypted with HTTPS. We apply data minimisation: tracking numbers are not stored on our servers, only transmitted to the provider needed to resolve the lookup. Access to the server is restricted.
9. Minors
The app is not aimed at children under 14 and does not require personal data to be used.
10. Changes to this policy
If we change how data is processed we will update this page and its revision date. Material changes will be announced in the app.