Privacy Policy
Last Updated: 09/09/2026
Your privacy is our highest priority. TrackSticker is designed to be a privacy-first item recovery service. This means we only collect the data absolutely necessary to connect a lost item with its owner, and we never track the continuous movements of your items or the devices that scan them.
1. Our Privacy Pledge
- No Surveillance: We do not continuously track the location of your QR-coded items or the devices that scan them. When a Finder scans a QR code, TrackSticker stores information from that scan. Each new scan replaces the information from the previous scan in the Dashboard.
- Privacy by Design: The person who finds your item (the "Finder") is never required to create an account, and they never see your name, email, phone number, or any other personal identifiers.
- Minimal Data: We commit to collecting and retaining only the minimum amount of data required for service functionality and security.
2. Information We Collect
We categorize the data we collect based on your role:
A. Data Collected from Owners (Account Holders)
This information is required to set up your account, manage your account, and notify you when your item is found.
| Data Type | Purpose | Retention |
|---|---|---|
| Account Information | Username and securely hashed password. | For the duration of your account. |
| Payment Data | Customer ID and transaction IDs. (Payment processing is handled externally; we never store card numbers). | For regulatory and billing purposes. |
| Email/Phone (Optional Opt-in) | Used for item-found alerts, account notifications, and two-factor authentication (2FA), where applicable. | For the duration of your account or until removed by user via account settings. |
| Shipping Info (Optional Opt-in) | To fulfill physical orders. | Retained as necessary for order fulfillment, dispute resolution, and tax/accounting compliance. |
| Sticker Information | Item labels (e.g., "Blue Backpack"), QR code IDs, and management statuses. | For the duration of your account. |
| Owner Login Activity | Last login timestamp and IP address for account security. | Last login timestamp for account duration; IP logged temporarily (90 days). |
B. Data Collected from Finders (Anonymous Users)
This information is collected anonymously to facilitate the secure return of the item.
| Data Type | Purpose | Retention |
|---|---|---|
| Scan Information | Location coordinates (when permitted), scan timestamp, and any voluntary finder message. The owner dashboard only displays the single latest scan event. | Retained temporarily for up to 90 days for abuse prevention and system diagnostics, after which records are purged. |
| Device/Browser Data | Hashed IP address (for privacy) and browser user-agent used for security and rate limiting. | Logged temporarily for security (90 days). |
3. How We Use Your Information
- To Provide the Service: To securely link a scanned QR code to its registered owner and provide the owner with the location associated with a scan.
- Notification: To send immediate alerts when your item is found.
- Billing: To process payments via our payment processor.
- Security: To protect our services and user accounts, including enforcing rate limits and monitoring for abuse.
4. Data Sharing and Service Providers
We do not sell, rent, or trade your personal data to any third parties for advertising or marketing. We only share data with trusted service providers strictly as necessary to deliver our services:
- Payment Processing: We partner with payment processors to handle payment transactions securely. Payment details are transmitted directly to the payment processor and are governed by their privacy policies.
- Transactional Communications: We use communications infrastructure and messaging delivery providers (such as email servers and telecommunication/SMS gateways) solely to deliver your requested item-found alerts, security codes, and account receipts.
- Hosting & Infrastructure: Our secure server, database, and cloud infrastructure vendors host backups and application data.
- Map Providers: Map rendering services receive location coordinates client-side solely to render the interactive map on your dashboard.
Mobile Information Privacy: No mobile information will be shared with third parties or affiliates for marketing/promotional purposes. Text messaging originator opt-in data and consent will not be shared, sold, or rented to any third parties or affiliates. If opted in, SMS alerts are strictly transactional; reply STOP to cancel or HELP for support at any time (msg & data rates may apply).
5. Essential Cookies & Browser Storage
We only use strictly necessary first-party cookies and local browser storage required to maintain your authenticated login session, preserve essential UI states, and enforce security protections.
We do not use third-party advertising cookies, cross-site trackers, or behavioral analytics cookies.
6. Your Rights and Control
- Access & Correction: Access and update your info via the Dashboard.
- Deletion: You can delete your account at any time. All personal data and stickers will be permanently removed, except for legal, financial, and security records (such as order invoices required for tax compliance).
7. Location Data Disclaimer
IMPORTANT: Location data depends on the Finder's device.
- If the Finder declines location permission, TrackSticker does not receive location data via the Geolocation API.
- The location is of the Finder’s device at the moment of scanning, not real-time tracking of the item.
8. Security Measures
- Encryption in Transit: Data transmitted between your device and TrackSticker is protected using HTTPS/TLS.
- Secure Storage: We use reasonable technical and organizational measures designed to protect your information from unauthorized access, loss, misuse, or disclosure.
- Data Minimization: We limit the information we collect to what is reasonably necessary to provide and secure TrackSticker.
9. Contact
Questions? Contact Us.