Trackora Privacy Policy
Last updated: 28 May 2026
1. Data Controller
Trackora is a package tracking service operating at trackoraapp.com. We are registered and operate under Estonian law (European Union) and are responsible for processing personal data in accordance with the GDPR (EU Regulation 2016/679).
2. Data We Collect
- Account data — email, first and last name at registration
- Parcel tracking numbers and user-defined labels
- Service usage data
- Payment information — processed via Stripe; we do not store card data
- Push notification tokens (only when permission is granted)
3. Legal Bases for Processing (GDPR Art. 6)
Contract performance, legitimate interest, user consent, and compliance with legal obligations.
4. How We Use Data
To provide the tracking service, send notifications, process payments, and improve the product.
5. Third-Party Services
Stripe (payments), TrackingMore (parcel tracking), Replit (hosting). All data transfers outside the EEA are made with appropriate safeguards.
6. Cookies
One strictly necessary session cookie is used for login. No third-party tracking or advertising cookies are used.
7. Your Rights (GDPR Art. 15–22)
You have the right to access, rectify, erase, restrict processing, port your data, and object. Send requests to privacy@trackoraapp.com.
8. Retention Periods
Personal data is retained only for as long as necessary for processing purposes or to comply with legal obligations.