Privacy Policy
v1 ·
Effective: 13 May 2026. Version 1.
1. Who we are #
TrackJet is a free B2B logistics tracking router operated by Trackjet. Our service is reached at https://trackjet.world. For privacy questions: [email protected]. Postal: Bürgeler Straße 25, Frankfurt am Main, Deutschland.
2. What we collect #
Information you provide
- Tracking numbers you paste into the search input. We hash these with a daily-rotating salt and never store the original.
- Optional notes on shipments saved via the "my TrackJet" feature. These live ONLY in your browser localStorage; we never receive or store them.
Information collected automatically
- Country only — read from Cloudflare's
CF-IPCountryedge header. We do not store your raw IP address. - Device category (mobile / desktop / tablet / bot) — never the full User-Agent string.
- Referrer domain (e.g. "google.com") — never the full referring URL.
- Anonymous session id — a 16-char hash derived server-side from your connection metadata + a daily-rotating salt. Mathematically uncorrelatable across days. Used only for aggregate funnel + bounce-rate analytics.
Information we do NOT collect
- Your name or email (unless you write to us)
- Your raw IP address
- Your full User-Agent string
- Cross-site cookies for tracking
3. Legal basis (GDPR Art. 6) #
- Art. 6(1)(f) — legitimate interests: running the tracking router and improving it via aggregate analytics. No individual profiling.
- ePrivacy Art. 5(3) — strictly necessary: localStorage for "my TrackJet" — used only because you actively saved a shipment.
4. Your GDPR rights #
You have the right to access, rectify, erase, restrict, object, and port any personal data we hold about you, and to lodge a complaint with a supervisory authority. Note: tracking-number hashes are non-reversible after 24 h. Email [email protected].
5. Cookies and localStorage #
We use ONE strictly-necessary cookie (tj_csrf) for form-submission security. No tracking cookies. localStorage is used only for features you actively enable: "my TrackJet" saved shipments and dark-mode preference. Clear localStorage anytime via your browser settings or via "Clear all" inside /my/shipments.
6. Third parties #
Cloudflare (CDN + security): processes connection metadata for performance and bot protection.
Google AdSense (when enabled): if we display ads (toggle controlled by us), Google AdSense may set cookies. Manage ad preferences at adssettings.google.com.
7. Retention #
- Tracking-number hashes: 365 days, then aggregated and deleted.
- Anonymous session ids: 30 days, then aggregated.
- Aggregated statistics: indefinite (no individual data).
8. International transfers #
Servers in Germany (Frankfurt). Data does not leave the EU under normal operation.
9. Children #
This service is not directed to children under 16. We do not knowingly collect data from minors.
10. Changes #
Material changes are announced via the "Effective" date at the top of this page and a 30-day banner on this URL.