Legal

Privacy Policy

Last updated: June 3, 2026

1. Who We Are

Trackora ("we", "us", "our") is a global shipment tracking platform operated from Business Bay, Dubai, UAE. Our website is accessible at track-ora.com. If you have questions about this policy, contact us at [email protected].

2. Information We Collect

Account information: When you create an account, we collect your email address and a hashed password. We do not store plain-text passwords.

Tracking data: Tracking numbers you submit are processed to retrieve shipment status from carriers. Saved shipments (if you are signed in) are stored in our secure database associated with your account.

Usage data: We collect standard web analytics data via Google Analytics (page views, session duration, referral source). This data is aggregated and does not identify you personally.

Device data: Browser type, operating system, and IP address are logged automatically by our hosting infrastructure (Cloudflare Pages) for security and performance purposes.

3. How We Use Your Information

  • To provide shipment tracking results in real time
  • To maintain your saved shipments dashboard
  • To send email status-change notifications (only when you opt in)
  • To process subscriptions through Paddle or Gumroad for existing subscribers
  • To improve the platform through anonymised analytics
  • To protect against fraud and abuse
  • To display relevant advertisements through Google AdSense

4. Sharing Your Information

We do not sell, rent, or trade your personal information. We share data only with:

  • Supabase — our database and authentication provider (GDPR-compliant)
  • Carrier APIs — tracking numbers are shared with carriers (AfterShip, 17track, Shipsgo) solely to retrieve tracking data
  • Resend — for transactional email delivery (opt-in status alerts only)
  • Google Analytics — anonymised usage statistics
  • Google AdSense — advertising partner (see Section 5 below)
  • Cloudflare — CDN and security infrastructure

5. Advertising & Google AdSense

We display advertisements on Trackora through Google AdSense, a service provided by Google LLC. Google AdSense uses cookies and web beacons to serve ads based on your prior visits to this website and other sites on the internet. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to Trackora and/or other sites on the Internet.

You may opt out of personalised advertising by visiting Google Ads Settings. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to our website. The use of advertising cookies by Google allows Google and its partners to serve ads based on visits to Trackora and other sites on the Internet.

For more information on how Google uses data when you use our site, please visit How Google uses data when you use our partners' sites.

6. Cookies

We use the following categories of cookies on Trackora:

  • (a) Essential cookies — required for session management, authentication, and core functionality. These cookies cannot be disabled without affecting how the service operates.
  • (b) Analytics cookies (Google Analytics) — we use Google Analytics to collect anonymised data about how visitors interact with Trackora (page views, session duration, referral source). This data helps us improve the service. You can opt out via the Google Analytics Opt-out Browser Add-on.
  • (c) Advertising cookies (Google AdSense) — Google AdSense places cookies to serve personalised advertisements based on your interests. These cookies may track your browsing activity across multiple websites and over time to build an interest profile and serve you relevant ads. You can manage your ad personalisation preferences at Google Ads Settings.

You may disable cookies in your browser settings; this may affect the functionality of the service.

7. Data Retention

Account data is retained for as long as your account is active. Saved shipment records are kept until you delete them or close your account. Analytics data is retained for 26 months per Google Analytics defaults.

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, email [email protected]. We will respond within 30 days.

9. GDPR — Rights for EU/EEA Users

If you are located in the European Union or European Economic Area, the following applies:

Legal basis for processing: We process your personal data on the following legal bases:

  • Contract performance — processing necessary to provide the tracking service you requested
  • Legitimate interest — analytics, security, and fraud prevention
  • Consent — email notifications, personalised advertising (where required)

Your GDPR rights include: the right to access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object to processing (including the right to object to direct marketing at any time).

Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data in accordance with applicable law.

International transfers: Your data may be transferred to and processed in countries outside the EEA (including the United States). Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. CCPA — Rights for California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

  • Right to know — you may request that we disclose what personal information we collect, use, disclose, and sell about you.
  • Right to delete — you may request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to opt out of sale — we do not sell your personal information to third parties. You do not need to opt out.
  • Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, contact us at [email protected].

11. Security

All data is encrypted in transit via TLS 1.3. Passwords are hashed using bcrypt. Our database is hosted on Supabase's SOC 2 Type II certified infrastructure.

12. Changes to This Policy

We may update this policy periodically. Material changes will be notified via email to registered users. Continued use of the service after changes constitutes acceptance.

13. Contact

For privacy inquiries: [email protected]
Trackora, Business Bay, Dubai, UAE