Parcel Dashboard
Privacy Policy
Last updated: October 3, 2026
Parcel Dashboard is a private, personal-use application that helps its owner identify and organize parcel deliveries from a Gmail inbox. It is not a public service and does not support multiple user accounts.
The application uses read-only Gmail access, processes only messages that match shipment-related search terms, and stores email-derived information in a locally operated PostgreSQL database. It does not sell personal data, show advertising, or use analytics or tracking cookies.
Who is responsible
Maikel van Riet is responsible for the operation of Parcel Dashboard and for the processing described in this policy.
Privacy questions or requests can be sent through the LinkedIn profile linked below.
Data the application accesses and stores
After the Gmail account holder authorizes access, Parcel Dashboard searches Gmail for recent messages that appear to concern orders, shipments, tracking, or delivery. The current search is limited to messages from the preceding 90 days and retrieves at most 25 matching messages per polling request.
For each retrieved message, the application may store the following information:
- Gmail message and thread identifiers
- Sender information, subject, received date and time, message text, and Gmail snippet
- Merchant and carrier names inferred from the message
- Tracking URLs and tracking numbers
- Estimated delivery dates and delivery status
- Internal timestamps showing when a shipment was first seen, updated, ignored, or marked as delivered
How the data is used
The data is used only to identify likely shipment messages, extract delivery details, prevent the same message from being processed repeatedly, display active deliveries, ignore false positives, and record when a shipment has been delivered.
Extraction is rule-based. The application may automatically classify uncertain matches as needing review, but it does not make decisions that have legal or similarly significant effects and it does not create profiles for advertising or other purposes.
Gmail permissions and Google user data
Parcel Dashboard requests the Gmail read-only OAuth scope. This allows it to read Gmail messages and metadata, but not to send, edit, label, archive, or delete messages in Gmail.
The application accesses Google user data only to provide its parcel-dashboard functionality. Its use of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.
Legal basis
The application is designed for personal and household use by its owner. Gmail access begins only after the Gmail account holder grants authorization through Google OAuth and can be withdrawn at any time.
To the extent that the GDPR applies, processing of the account holder’s data is based on consent. Limited information about senders or other people may appear incidentally in shipment emails; that information is processed on the basis of the owner’s legitimate interest in organizing personal deliveries. Such information is not used for unrelated purposes.
Storage and retention
Email-derived data is stored in a PostgreSQL database operated with the application. Gmail OAuth credentials and tokens are stored as local files used by the backend. The application is intended to run in a private local environment.
There is currently no automatic retention or deletion schedule. Records remain stored until they are manually removed or the local database volume is deleted. Marking a shipment as delivered or ignored removes it from the active dashboard but does not delete the underlying email or shipment record. This policy will be updated when an automated purge function is introduced.
Sharing and third parties
Parcel Dashboard does not sell personal data and does not share it with advertisers, analytics providers, or data brokers. It communicates with Google to complete OAuth authentication and retrieve Gmail data. Google processes data under its own terms and privacy documentation.
The current application does not send shipment data to carrier APIs or other tracking providers. Stored tracking links may take the user to a carrier or merchant website when opened; those websites apply their own privacy policies.
Cookies and analytics
Parcel Dashboard does not use advertising cookies, analytics services, or cross-site tracking. The application may use strictly technical browser and network functionality required to display the dashboard and communicate with its own backend.
Security
Access is limited by requesting Gmail’s read-only permission. Credentials, OAuth tokens, and database contents are intended to remain in the owner’s private runtime environment and are excluded from the source-code repository.
The application’s local API does not currently include user authentication and must not be exposed directly to the public internet. No method of storage or transmission is completely secure, so the application and its host system must be kept updated and appropriately protected.
Your choices and privacy rights
The Gmail account holder can stop future Gmail access by revoking Parcel Dashboard’s access in their Google Account settings and deleting the locally stored OAuth token.
Where the GDPR applies, individuals may have rights to access, correct, erase, restrict, or receive their personal data, and to object to processing. Consent can be withdrawn without affecting processing that took place before withdrawal. Requests can be made through the contact link above. Identity may need to be verified before a request is completed.
Individuals may also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Changes to this policy
This policy may be updated when Parcel Dashboard’s features, integrations, deployment model, or retention practices change. The date at the top of this page indicates the latest revision.