Privacy policy

CheckMyOrder ("we", "us") is a free parcel-tracking website operated by the operator of this website. This policy explains what information we process when you use CheckMyOrder, why, and for how long. We wrote it to match how the service actually works.

Summary

• You don't need an account to track a parcel, and we never ask for your name, phone number or email to do so.
• To show a parcel's status we send its tracking number to the courier's official system or to an authorised tracking-data provider.
• We keep the returned status for a short time (cache) and keep masked, non-reversible records of lookups for up to 90 days.
• We don't sell data, and we don't use tracking numbers for advertising.

Information we process

Tracking numbers you enter

When you track a parcel, your tracking number is:

1. Checked in your browser and on our server to see whether it looks valid and which courier it might belong to.
2. Sent to a data provider, only if we have live tracking for that courier: either the courier's official API (for example DHL's Shipment Tracking API) or an authorised tracking-data provider (for example Ship24). These providers process the number under their own terms and privacy policies. If we don't have live tracking for a courier, the number isn't sent anywhere; we show you a link to the courier's official tracker instead.
3. Cached with its status — the shipment status and scan history the provider returned (which can include city or hub names) — for between 2 minutes and 6 hours depending on the status, so repeated lookups are fast and providers aren't overloaded. Expired cache entries are deleted automatically.
4. Logged in a minimised form for up to 90 days: a masked version (for example EE*******85IN), a one-way keyed hash of the number, the courier, the result type (for example "found" or "error"), and timing information. We use these records to fix errors, measure reliability and prevent abuse. They aren't linked to you, your device or your IP address.

Messages you send us

If you use the contact form, we store your message, the type of message, the page you sent it from and — only if you choose to give it — your email address, so that we can reply. We keep messages for up to 12 months after they are closed, then delete them.

Technical information

Like most websites, our servers receive technical information with each request, such as your IP address, browser type and the page requested. Our application uses a short-lived, one-way hash of your IP address in memory to limit excessive requests; it is not written to our database. Our web server may keep standard access logs (including IP addresses) for security and troubleshooting for up to 14 days.

Cookies and similar technologies

Public pages don't set cookies, with one exception: if you use the EN | हिंदी language switch, we store your choice in a small cookie (cmo_lang, value en or hi, kept for one year) so the site opens in that language next time. It contains nothing else. Administrators who sign in to our admin area receive a strictly necessary session cookie.

We count page views ourselves, without cookies: for each page we record the page address (without any search terms or tracking numbers), the website or app you came from, the type of device (mobile, tablet or desktop) and the language of the page. To count unique visitors per day we store a one-way code made from your IP address, browser details and a secret that changes every day and is deleted after two days, so visits can't be linked across days or traced back to you. We don't store IP addresses or browser details, and we keep these statistics for up to 400 days. If your browser sends a "Do Not Track" or Global Privacy Control signal, we don't count your visit.

If we enable an additional website analytics service, we will use either a cookieless service, or Google Analytics only after you choose "Allow analytics" in the banner (your choice is stored in your browser). We never send tracking numbers to analytics services.

How we use information

We use the information above only to provide and secure the tracking service, to respond to messages, to understand how the site is used (aggregate statistics) and to comply with law. We don't sell personal data, build profiles of your shipments or use your tracking numbers for advertising.

Sharing

We share information only with: tracking-data providers (as described above), our hosting provider (which stores our servers and database), and authorities where required by law.

Security

We use HTTPS, restrict access to our database and admin area, store passwords using a strong one-way hashing algorithm, and log administrative actions. No system is perfectly secure, so we also keep the data we store to a minimum.

Your choices and rights

You can use CheckMyOrder without giving us any contact details. You can ask us to access, correct or delete a message you sent us by emailing support@checkmyorder.in. Because lookup records are masked and not linked to a person, we usually can't link them to you.

We aim to comply with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

Children

CheckMyOrder is a general-audience tool and isn't directed at children.

Changes

We'll update this page when our practices change and show the date of the latest version below.

Contact

Questions or concerns about privacy: support@checkmyorder.in.

Last updated: 20 October 2026.