Last updated: 9 August 2026
This policy explains what happens to information when you use the tracking
scanner at tracking-scanner-eight.vercel.app.
It is written to be read, not to be survived. If anything here is unclear, email mobzdev@proton.me and I will answer.
This site is run by Muhammad Bin Zeeshan, based in the United States. For the purposes of the UK and EU General Data Protection Regulation, Muhammad Bin Zeeshan is the data controller.
Contact: mobzdev@proton.me
There is no company behind this. It is one person building a tool.
When you paste a store address, the server fetches that store’s publicly available pages — the same pages any visitor to the shop can see. It does not log in, does not use any Shopify admin interface, and does not read anything private.
The address itself is not written to the database. It exists in memory for the few seconds the scan takes, and then it is gone. This was a deliberate design decision, made because asking merchants to hand over their store address and then keeping a list of them felt like the wrong trade.
Legal basis: legitimate interests — you asked for a scan, and fetching the page is how the scan happens.
If you choose to join the waitlist, your email address is stored so you can be told when the paid monitoring product launches.
It is used for that and nothing else. It will not be added to a newsletter, sold, rented, or shared with any third party.
Legal basis: consent. You gave the address voluntarily and can withdraw at any time by emailing mobzdev@proton.me and asking to be removed. Removal is permanent deletion, not a suppression flag.
Retention: until you ask for it to be deleted, or until the waitlist has served its purpose and the list is deleted in full — whichever comes first. If the product is never built, the list is deleted.
The server records that a scan happened, what kind of result it produced (for example: tracking found, store unreadable), and when. These records contain no store address and no email address, and cannot be connected to you or to any particular shop.
They exist so it is possible to answer one question: does anyone find this useful.
Legal basis: legitimate interests — understanding whether a tool works, using the least information capable of answering that.
To stop the scanner being abused, the server briefly holds the network address (IP address) of recent requests in memory, so that one visitor cannot flood it. These are not written to the database and are not retained.
Separately, the hosting provider keeps its own standard server logs, in the way that every website host does. Those are described in the hosting provider’s own policy.
Legal basis: legitimate interests — keeping a free public service available and preventing abuse.
This site sets no cookies. It uses no local storage, no session storage, and no browser fingerprinting. There is nothing to consent to and no banner to dismiss, which is why you have not been shown one.
Two service providers are involved, both of them standard infrastructure:
| Provider | What they do | Where |
|---|---|---|
| Vercel | Hosts the site and runs the scanning code | United States |
| Neon | Provides the database that holds the waitlist and the anonymous counts | United States |
Both act as processors on my instructions. Neither is permitted to use the information for their own purposes.
Because both are based in the United States, waitlist email addresses given by people in the UK or EU are transferred outside the UK/EEA. Both providers offer Standard Contractual Clauses for this purpose.
No one else receives any of it. There are no analytics companies, no advertising networks, no email marketing platforms, and no data brokers involved. If that ever changes, this page changes first.
If you are in the UK or the EU, you have the right to:
ico.org.uk); in the EU, your
national data protection authority
In practice, the only information held about you is a waitlist email address if you gave one. Email mobzdev@proton.me and say what you want done. There is no form and no verification process beyond replying from the address in question.
Requests are answered within 30 days, and usually within a couple of days, because the list is short and I read my own email.
If you are outside the UK and EU, these rights are extended to you anyway. It is easier than working out who qualifies, and it is the right thing to do regardless.
This tool is for shop owners. It is not directed at children and no attempt is made to collect information from anyone under 16.
The waitlist is held in a hosted database that requires authentication. The connection between your browser and the site is encrypted.
An honest statement rather than a reassuring one: this is a small free tool built by one person. Reasonable care has been taken, but no website can promise it will never be breached. The main protection here is that there is very little worth taking — no passwords, no payment details, no customer data, and no list of which shops were scanned.
If this policy changes, the date at the top changes with it. If a change is significant — a new provider, a new use for your email address — anyone on the waitlist will be told by email before it takes effect.
Real replies from a real person.