ShipTrack is a free, open-source shipment tracking tool. This policy explains what we collect and why. Source code: github.com/Aswincloud/shiptrack.
What we store
- Account: your email address, a salted PBKDF2 hash of your password, and the timestamp when you signed up.
- Watches: the tracking numbers you register, an optional label, the carrier, the email address you want notified, and the polling interval you chose.
- Event history: a record of carrier scan events for each watch so we can detect changes.
- OTP codes: a hash of the one-time signup code is held until you verify (max 10 minutes), then deleted.
What we don't store
- No payment information — the service is free.
- No third-party analytics, tracking pixels, or advertising cookies.
- No IP-address logging beyond Cloudflare's standard request logs (which we don't aggregate or analyse).
- We never see or store your raw password — only the PBKDF2 hash.
Where it lives
Data is stored in Cloudflare D1 (managed SQLite) in the Asia-Pacific region. Emails are sent through Resend. Tracking lookups are made directly to Blue Dart's public tracking page.
Who can see it
Only you can see your own watches in the dashboard. The site operator (admin) can see the list of registered users, their email, and watch counts — used to support users and prevent abuse. Admins do not see your password.
Deletion
Cancel any watch from the dashboard or via the unsubscribe link in any alert email. To delete your account entirely, email aswin@aswincloud.com. All your watches and event history are removed when the account is deleted.
Contact
Questions? aswin@aswincloud.com.