Private order status
Use the private code from your order confirmation to see preparation and delivery progress. Your name, address, cart, payment details, and invoice identifiers are never shown on this page.
How privacy works
OpenPGP protects the recipient fields submitted at checkout. A keyed lookup protects the private code used on this page. If a carrier number is available, it is opened locally in your browser.
Your name, email, street, postal code, and city are encrypted in this browser with the shop's OpenPGP public key before they are sent. Country and shipping option stay server-readable for routing. The matching private key is kept separately and is not installed on the webshop server.
The code is sent in the request body, not placed in the page URL. The database stores a keyed HMAC value instead of a readable copy. This page clears its local tracking session after five minutes of inactivity or when the page is left.
If a carrier number has been added, the server returns it as AES-GCM ciphertext. This browser derives the decryption key from your private code and opens the number here on your device.
The tracking response is limited to fulfillment and preorder progress, timestamps, the carrier name, and an encrypted shipment reference when one exists. It does not return recipient, cart, payment, total, or invoice data.