Privacy Policy

This Privacy Policy explains what information iziTn ("iziTn", "we", "us") collects when you use the iziTn website and API, and how that information is used. It applies only to iziTn — a standalone package-tracking product — and not to any other site.

We collect the minimum needed to run the service:

• Account information — the name and email address you register with, or, if you sign in with Google, the name, email, and Google account ID Google shares with us.
• Password — stored as a one-way bcrypt hash if you register with a password. We never store your plaintext password. Accounts created via Google sign-in have no password on file.
• Lookup data — the tracking numbers and search filters (carrier, zip/city, date range) you submit, and the carrier's response, kept as your lookup history.
• Payment data — the crypto network, token, transaction hash, and on-chain sender/recipient addresses for any payment you submit, plus the IP address the payment was submitted from (used only for fraud prevention). We never ask for or store a private key or seed phrase.
• Technical data — standard request metadata (IP address, browser type, timestamps) generated by using the site.

• To run tracking lookups against the UPS and FedEx APIs on your behalf.
• To verify crypto payments on-chain and credit your account.
• To authenticate you and keep your account secure.
• To maintain your lookup history and credit balance.
• To detect and prevent fraud or abuse of the service.

We do not sell your information, and we do not use it for advertising — iziTn has no ads and no ad partners.

iziTn does not use tracking cookies. Your session is a bearer token stored in your browser's localStorage, not a cookie, because the frontend and backend are served from different origins. Your light/dark theme preference is also stored in localStorage, purely for your convenience. Neither is shared with any third party.

• UPS and FedEx — the tracking number and carrier you submit is sent to the relevant carrier's API to retrieve status.
• Google — if you choose "Continue with Google," your credential is verified directly with Google; we only read the name, email, and account ID Google returns.
• Our crypto verification service — the transaction hash and network/token you submit are checked against the relevant blockchain to confirm payment.

We do not otherwise share, rent, or sell your personal information to third parties.

We keep account, lookup, and payment records for as long as your account is active, so your credit balance and history stay accurate. Passwords are hashed with bcrypt; access tokens expire after 7 days. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, or to object to certain processing. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable time.

iziTn is not directed at, and is not knowingly used by, anyone under the age of 18.

We may update this policy from time to time. Changes take effect as soon as the revised policy is posted on this page, with an updated "Last updated" date above.

Questions about this policy? Email [email protected]. See also our Terms of Use.