Last updated: July 14, 2026
This policy explains what data the Iron Tracking app (the "app"), the Iron Margin order-tracking app for Shopify, collects, how it is used, and the choices available to merchants and their customers. It applies to the app only, not to any merchant store or website that uses it.
Data the app accesses
When a merchant installs the app, it reads the following from the store through the Shopify API:
- Order details: order number, line items, and order status.
- Fulfillment and shipment details: carrier, tracking number, and delivery status.
- Customer details tied to an order: name, email, phone number, and shipping and billing address. These are used to match an order to the person tracking it and to send delivery updates.
The app also stores delivery-update sign-ups that a shopper submits on the tracking page (an email address or phone number, linked to the shop). It does not create customer profiles beyond this.
How the app uses data
- To show order and shipment status on the store's tracking page.
- To send delivery updates to shoppers who ask for them, on the channel they chose.
- To authenticate the merchant and operate the app.
The app does not use this data for advertising and does not sell it.
Storage and retention
To serve the tracking page quickly, the app keeps a cached copy of each order's tracking details (order number, shipping ZIP, carrier and delivery status, and the items in the order), tied to the shop it belongs to. This cache is kept only while the app is installed. Delivery-update sign-ups are stored only while they are needed to send updates. When a merchant uninstalls the app, the app deletes that store's cached order data and sign-ups. The app also honors Shopify's data-removal requests, including deleting a specific customer's cached orders and sign-ups on request.
Sharing
Data is shared only with the service providers needed to run the app, such as our hosting provider and the shipping carriers whose tracking the app displays. It is not shared with anyone else and is not sold.
Security
Data is encrypted in transit. Access is limited to authorized Iron Margin staff. We keep the amount of personal data we handle to what the app needs to work.
Your choices
Shoppers can decline to sign up for delivery updates and can ask a merchant to remove their sign-up. Merchants can remove all of their store's data by uninstalling the app. For any access or deletion request, contact us at the address below.
Contact
Questions about this policy or a data request can be sent to privacy@ironmargin.com.