Policy on protection of clients' personal data
The website is located at parcelsapp.com ("site"), along with mobile applications, provide online tracking services for parcels and shipments. We respect your privacy and take your security seriously online. To provide you with the best service and timely updates, we record a variety of information when you visit our site.
To better protect your privacy, we provide the Privacy Policy below, explaining our online practices for collecting information and how you can change how we collect and use your information. We use your Personal Information only to ensure the work and improvement of the Site. By using the site, you agree to the collection and use of information in accordance with this policy.
By using the site and/or associated "Parcels" mobile app for iOS and Android, the Customer (User) confirms that he has read the conditions of this Privacy Policy with due diligence and accepts them, without any additional comments.
The administration reserves the right to change, add or delete the clauses of this Agreement at any time without notifying the Clients.
The site collects and stores only those personal data that are necessary to provide services and/or sell goods and/or provide other valuable services to site visitors.
Personal information of the Client can be used for the following purposes:
We offer the option to sign in using your Google account. Authentication is securely handled by Clerk.com, a third-party authentication service provider. When you choose to sign in with Google, we access the following information from your Google account:
How we use this data:
Data storage and handling: Your name and email address are stored securely in our database. Google Sign-In does not grant Parcels access to your Gmail messages. Clerk.com handles the authentication process and may store authentication tokens in accordance with their own privacy policy. We do not have access to your Google account password.
Your control: You can manage your notification preferences at any time from your account settings. You may also revoke our application's access to your Google account through your Google Account permissions page.
If you choose Email Import in the mobile app, you can create a temporary address ending in @parcelsapp.com for that app installation. You may forward individual order or delivery emails to it, or set up a forwarding rule in your own email service. This feature does not connect to or read your mailbox. A forwarding rule you create with your email service remains under your control; deleting the temporary address in the app does not remove that rule.
Mailgun, a Sinch Email service operating in the United States, receives the forwarded message and sends it to our server. A forwarded message can contain its headers, sender and recipient addresses, subject, body, links and attachments, including personal information about you or others. We use it to find orders, shipments and tracking numbers and to present findings for your review. Mailgun handles the message and delivery metadata under its own processing and retention terms.
We encrypt admitted messages on our server. When a message produces a finding, we erase its original content after processing. If we cannot recognize a finding, we keep the encrypted original for up to seven days from receipt to diagnose and improve the import parser, then erase it automatically. An unfinished processing attempt is erased within 24 hours. Forwarding setup notices are handled separately and their usable code or link expires after 24 hours. Deleting the temporary address erases any retained message content and pending findings earlier.
To fix recognition errors, an authorized developer may manually access the full content of a specific unrecognized message and provide it to OpenAI for analysis and parser improvement. Access is limited to an individual message and recorded with the operator, reason and time. The message provided to OpenAI is processed under its data processing terms; the seven-day deletion period for our encrypted original does not control retention of a copy at OpenAI. Incoming messages are not automatically sent to an AI service.
After a corrected parser is released, we may manually reprocess an unrecognized message before its original seven-day deadline. Newly recognized orders and tracking numbers appear only as findings for you to review; nothing is added to your parcel list without your choice. Pending findings expire after 30 days or when you delete the temporary address. Orders and parcels you choose to add then follow the app's ordinary data lifecycle. Message content is not stored on your phone or included in product analytics, crash reports or ordinary support reports.
A temporary address is tied to one app installation and expires after 30 days without authenticated activity. If you uninstall the app, an email-service forwarding rule may continue to send messages until you remove it yourself; messages to an expired or deleted address are not admitted into our import queue. For questions or a data request, contact support@parcelsapp.com.
The app works without an account, sign-up or password. It never asks for your name. This section describes what the app sends to our servers and to the services we use. Parcel names, notes, your own parcel photos and pinned parcels stay on your phone unless a section below says otherwise.
To protect the service from automated abuse, the app proves that it is a genuine, unmodified installation from the App Store or Google Play. On iPhone it uses Apple's App Attest: a key is created inside the phone's secure hardware and Apple confirms it to our server. On Android it uses Google Play Integrity: Google returns a verdict about the app, the device and the Play account licence, and our server reads it through Google. We keep the result and the installation's public key. We do not receive your Apple or Google account details. A phone that cannot pass the check can still open shared tracking links, but it cannot use features that need our server.
Sync is optional and needs no account. One phone shows a one-time code or QR code, and the other phone scans it. While Sync is on, our server keeps a copy of your parcel library so that your linked devices stay the same: tracking numbers and links, the names and notes you gave parcels, archive and notification-mute states, carrier details you entered, and imported shop orders (shop, order number, item titles and links, delivery dates and shipments). It also keeps the list of linked devices with the name you see in the list and a model hint. Pinned parcels and your own parcel photos are not synced.
Turning Sync off on a device, or removing it from the device list, unlinks that device; its local data stays on it. When the last device leaves, or when no linked device has checked in for 30 days in a row, the whole Sync copy is permanently deleted from our server. There is no recovery code or account recovery.
You can share a delivery text (for example from Messages or WhatsApp) to the app, and on iPhone you can set up a Shortcuts automation that passes delivery texts to the app's "Parcel from text message" action. The app cannot read your messages by itself. The text you pass is read on your phone: the app looks for tracking numbers and delivery details. The text itself is not sent to our server, to analytics or to crash reports, and it is not kept after it has been read. Only the tracking numbers found in it (with a carrier hint) are sent to our server, the same way as a number you type. Details found in the text, such as a delivery-management link or a courier code, are saved with the parcel on your phone.
You can sign in to a supported shop (AliExpress, Amazon, eBay, Temu, SHEIN, Lazada) inside the app's built-in browser. Your shop sign-in stays between you and the shop: we never see your shop password, and the shop's cookies stay in the app's browser on your phone. The app reads your orders page on the phone and shows the orders it found. Only the orders you choose are added. The page content is not sent to our server. The tracking numbers of the added parcels go to our server for tracking, and the orders are synced only if you use Sync. The app downloads the instructions for reading each shop's pages from our server.
When you share a parcel, our server creates a public link that shows that parcel's tracking information to anyone who has the link. The name you gave the parcel and your notes are never part of the link. You can close the link at any time. A link also expires after 30 days without being opened, and always 45 days after it was created.
Packages Premium and Parcels Premium are subscriptions sold by the App Store and Google Play. Apple or Google takes the payment, and we never receive your card details. Our server checks the purchase with Apple or Google and keeps the subscription status, its product and dates, and the store's transaction identifiers for this installation.
When the app crashes or hits a serious error, it sends a crash report to Sentry (Functional Software, Inc., United States). A report contains the technical error and where it happened in the code, the app version and build, the operating system version and the device family. The app removes tracking numbers, texts and other content before sending. No screenshots, names or account details are attached, and reports are not linked to an advertising identifier.
The store versions of the app report how the app is used to Google Analytics for Firebase. This includes screen views and five events: parcel added, import started, barcode scanned, Premium purchase started and Premium purchased. These reports carry no parcel, order, message or personal content, no user ID and no advertising identifier. Firebase also collects standard technical data, such as the app instance ID, device model, OS version, country and session counts.
The free version shows ads from Google AdMob. Premium has no ads. In the EEA, the UK and Switzerland, the app first shows Google's consent form, which records your advertising choices. You can change them later in the app's settings. On iPhone, the app then asks the system App Tracking Transparency question once. Ads are personalised only if you allow it, and non-personalised otherwise. Google may process your device's advertising identifier (if allowed), IP address, approximate location derived from it, device information and ad interactions, under Google's policy. If you choose to watch a rewarded video to add one more parcel, Google confirms the reward to our server for this installation.
When you send a problem report or feedback from the app, we receive the text you wrote, the parcel you report about (its tracking number and carrier), any screenshot you chose to attach, a short technical summary (app version, device model, OS version, language) and, if you give it, your email address for a reply. We use this only to answer you and to fix the problem.
Deleting a parcel in the app removes it from the phone and, with Sync, from the Sync copy. Turning Sync off on your last device deletes the Sync copy at once. Deleting your email-import address erases its pending findings and retained messages. Closing a shared link stops it at once. Uninstalling the app removes everything stored on the phone. To delete anything else, or for any other data request, write to support@parcelsapp.com and say what to delete.
With regard to the user's personal information, its confidentiality remains, except for cases of voluntary provision by the user of information about himself for general access to an unlimited number of persons.
The site has the right to transfer the user's personal information to third parties in the following cases:
receive-cookie-deprecation – Placed by Google ad services (DoubleClick / AdSense) as part of Chrome’s “Privacy Sandbox” testing. It simply stores the value “1” to signal that the page is taking part in Google’s experiment for serving and measuring ads without traditional third-party cookies. It holds no personal data or profiling information. Typical lifetime: ≈ 6 months, after which it is automatically removed or renewed.
__eoi – Set by Google AdSense. Used purely for security and anti-fraud checks (for example, to detect invalid clicks on ads). Does not contain any personal profile data. Typical lifetime: about six months.
FCCDCF – Set by Google’s Funding Choices consent-management banner. Stores your current cookie-consent choices (the IAB “TCF” string and Google-specific signals) so the banner doesn’t ask you again on every page. Typical lifetime: up to 13 months, then removed automatically or whenever you clear or change your consent settings.
_parcel_session – First-party session cookie generated by our Ruby on Rails application. Keeps you signed in and remembers basic site preferences as you navigate between pages. Contains only a random session ID, not personal data. It expires automatically when you close your browser (or after a period of inactivity if you chose “Remember me”).
__gads – Set by Google AdSense / DoubleClick. Helps count ad impressions, limit how often the same ad is shown and detect click-fraud. Contains only a random identifier, not personal data. Typical lifetime: 13 months.
__gpi – First-party cookie dropped by Google AdSense when ads load on our domain. Records information needed to measure and optimise ad performance. Stores a pseudonymous ID, no personal profile data. Typical lifetime: 13 months.
_ga – Set by Google Analytics 4. Primary visitor-ID cookie that lets us recognise returning users and compile anonymous statistics (page-views, session length, etc.). Contains a random client identifier, no names or emails. Lifetime: 2 years.
_ga_Z5RCF4F7T8 – Companion cookie for the GA-4 property “G-Z5RCF4F7T8.” Keeps session state for that specific Analytics property. Same content as _ga but scoped to the property. Lifetime: 2 years.
FCNEC – Set by Google’s Funding Choices consent banner. Stores whether you have closed the banner and which non-essential categories you toggled off, so the banner doesn’t pop up again on every page. Lifetime: up to 13 months (or until you clear/change consent).
We have appointed EU Rep as our Representative under Article 27 of the EU General Data Protection Regulation (“GDPR”). All GDPR queries from EU Data Subjects or Data Protection authorities should be submitted to eurep.ie via their dedicated form. BizLegal Ltd trading as EU Rep have their registered office at 27 Cork Road, Midleton Co. Cork, Ireland. Company number 635921.
We use cookies to analyze traffic, select the right content and advertising for you, and give you the opportunity to share information in social networks. We share information about your activities on the site of Google's partners: social networks and advertising and web analytics companies. Our partners can combine this information with the information you provided, as well as with the data they received when you used their services. To protect your privacy, we restrict the use of these tools.
When you visit our site, use our services, applications, tools, go through our advertising links and exchange messages with us (for example, by e-mail), we or our authorized service providers can use cookies and other similar technologies to store information to allow you to perform the desired actions more efficiently, faster and more safely. This page will give you a more complete understanding of these technologies and how we apply them on our websites, services, applications and tools. Below are the main points of our policy of using cookies and similar technologies, which you should familiarize yourself with.
We can cooperate with other companies, usually called "service providers", who can place - with our permission - cookies and similar elements used to store information on our websites, and also integrate them into our services, applications and tools . These service providers help us in the exploitation of our websites, applications, services and tools, and help you to perform the desired actions more efficiently, faster and more safely.
Third-party vendors, including Google and Yandex, use cookies to show you ads based on previous visits to our site. Cookies advertising preferences allow the company Yandex, Google and its partners to show ads in view of your visits to our and / or other sites. Users may opt out of personalized advertising by visiting Ads Settings. Alternatively, you canopt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.
Our websites, services, applications and tools can use the services of third parties, such as ad networks and exchanges, for promotional purposes. These ad networks and exchanges, in turn, can use "other" cookies, and similar technology elements to collect the information they need to provide you with relevant services. They can also collect other data about you, such as the device ID, IP address and advertising ID (IDFA), which can be used to customize the advertisements displayed on our and other websites to your best interests.
We do not control the use of the above technologies by third parties, even if they use our technologies to collect or store data. Information about the collection, storage and sharing of data with them can be found in terms of the provision of services by these companies, their privacy policy, and also in the relevant documents of these companies concerning permits, notifications and the right to choose. We do not make any assurance about the policies and practices of third-party advertisers, ad networks and exchanges, and third parties associated with them.
The site takes necessary and sufficient organizational and technical measures to protect the user's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other improper actions of third parties with it.
The Service has the right to make changes to this Privacy Policy without the Client's consent and notification. Such changes come into force from the date of their publication on the site.
The Client must get acquainted with the changes introduced in time and confirms his responsibility for the consequences of untimely acquaintance with them.