Privacy Policy
Last updated: July 29, 2026
PandaTrack is built for collectors who want one place to track orders and shipments. We take your privacy seriously. This policy explains what data we collect, how we use it, and what rights you have.
Who we are
PandaTrack is a web app that helps you organize your collecting: discover and save stores, log orders and items, track pre-orders and payments, and follow shipments. We process your data to provide this service, improve the product, and communicate with you in line with this policy.
PandaTrack is an independent project, currently operated by its creator in a personal capacity (not yet incorporated as a company); they decide how your data is handled (the data controller). You can contact us at [email protected].
Data we collect
We collect information you give us directly (e.g. email when you create an account, profile details, store and order data you add). The order data you add can include information about other people, such as a seller's name or phone number.
Some images are stored permanently, because they are part of your content: your profile picture and a store logo you upload. Photos you send to create an order from an image are a different case: they are not stored, they are processed and discarded. We explain this in the "Photos and AI processing" section.
We may collect technical data such as IP address, browser type, and usage information (e.g. which features you use) to run and improve the Service. We may use cookies and similar technologies as described in the Cookies section.
Photos and AI processing
PandaTrack lets you create an order from a photo or a screenshot: you upload the image and an AI reads the order details (store, items, amounts, dates) to fill them in for you. This is an optional feature. If you do not use it, none of your images is ever sent to an AI provider.
Nothing is saved on its own. The AI only proposes a draft: the order does not exist until you review the details on screen and confirm them.
We do not store the image. It is processed on the spot and discarded when the request ends: it does not land in our database, it is not uploaded to our file storage, and it is not written to our technical logs. The only thing we keep is the order data you confirmed.
Before the image leaves your device, your browser re-renders it, and that step removes the file's metadata, including the photo's GPS location. That location never leaves your phone.
The AI provider is Google, through its Gemini API. We use the paid service, not the free version: on the paid service Google does not use your photos or the responses to train its models. Google does keep a temporary log of requests to detect abuse and comply with the law, for a maximum of 55 days, and deletes it afterwards. Your photos are not reviewed by humans: that only happens if the project owner turns on data sharing for model improvement, and we do not turn it on.
If you share a photo to PandaTrack from your phone's share menu, that photo is stored temporarily in browser storage, on your own device, for a maximum of 5 minutes and only to carry it to the review screen. It is deleted as soon as it is used, or when that window expires.
A screenshot of a conversation almost always contains another person's data: the seller's name, their phone number, what they wrote. That data is sent to the AI provider like the rest of the image and, if it ends up in the order fields you confirm, it is stored alongside your order. So we ask you to upload only what is needed and, whenever you can, to crop or cover what is not. You are responsible for the content you upload and for having the right to use it.
If you are that other person and you believe your data appears in someone's order, email us at [email protected] with the details we need to locate it. We will review the request and delete that data where appropriate.
We keep a usage counter for this feature (how many photos were processed and how much the request cost) to control spending and prevent abuse. That counter does not include the content of the images or of what was extracted from them.
How we use your data
We use your data to provide and improve PandaTrack, to send you important updates about your account and the Service, to respond to your requests, and to comply with the law. We may use aggregated, non-identifying data for analytics and product development. We do not sell your personal data to third parties for their marketing.
Legal basis (EEA/UK)
Where applicable, we rely on: (1) your consent (e.g. for marketing emails), (2) performance of a contract (e.g. to provide the Service), (3) legitimate interests (e.g. security, analytics, product improvement), and (4) legal obligation where required.
Retention
We keep your data only as long as needed to provide the Service, comply with the law, or resolve disputes. When you delete your account or ask us to delete your data, we will do so in line with our internal retention and deletion procedures, except where we must retain data for legal reasons.
Your rights
Depending on where you live, you may have the right to access, correct, or delete your data, to restrict or object to processing, to data portability, and to withdraw consent. You may also have the right to complain to a supervisory authority. To exercise your rights, contact us using the details in the Contact section.
Security
We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. No system is completely secure; we encourage you to use a strong password and keep your account details safe.
Children
The Service is not directed at children under 13 (or the applicable minimum age). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can delete it.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date. For important changes we may notify you by email or in the app. We recommend checking this page periodically.
Contact
If you have questions about this Privacy Policy or want to exercise your rights over your data, email us at [email protected]. You can also follow us on TikTok as @pandadcollector. We are committed to transparency and will respond to your requests in line with applicable law.