ColystriaSKYNET SYSTEM · Updated: 21 October 2026
Privacy policy
Controller and contact
Colystria is a parcel tracking app published under the name SKYNET SYSTEM. For privacy questions and requests: sr@skynet-system.com. General publisher information is available on the SKYNET SYSTEM website.
Data on your device
No Colystria account is required. Tracking numbers, parcel names, notes, preferences and history are stored in your browser or app. They are not automatically synced across devices. You can export a backup and delete parcels in Settings.
Tracking requests
At your request, the number and carrier are sent over HTTPS to the Colystria server and then to the necessary carriers or data providers, including CN Express, Cainiao, La Poste, Parcels or 17TRACK depending on available connections. They receive the queried number and apply their own policies. Results are cached in memory for 15 minutes. Personal notes are not sent. API credentials stay on the server. Destination country and postal code are optional; when supplied, they are sent to tracking sources to locate your shipment. A one-way hash of the number and carrier is stored on the server for 30 minutes to prevent duplicate registrations after an interrupted request.
Photos, camera and maps
Camera access is optional and used to read barcodes or printed numbers. OCR runs on your device with a model supplied by our site. Images stay in memory while reading and are not uploaded or stored with parcels. We do not request your phone’s GPS location. OpenStreetMap receives map tile requests, including the connection IP address and displayed map area, without tracking numbers. Markers use known place centres, never a courier’s live GPS.
Alerts and retention
Automatic alerts are optional. Enabling them sends the number, parcel name, selected statuses, language and device push subscription to a private server file. Supported sources are checked every 30 minutes. Watches expire after 60 days and are removed about 24 hours after confirmed delivery. Inactive devices are removed after 90 days. Web notifications pass through Apple, Google or Mozilla, depending on your browser. When mobile alerts are enabled, iOS notifications use Apple APNs and Android notifications use Firebase Cloud Messaging (Google). Their technical token is stored in the private alert file and is not used for advertising. Firebase also uses an installation identifier to deliver messages. Cloud Messaging auto-initialisation is disabled before you enable alerts. Google describes its retention of technical identifiers in the Firebase privacy information. Local reminders stay on the device. Disabling alerts removes the server watch; clearing browser data alone does not immediately do so.
Mobile advertising and consent
Mobile versions may show a Google AdMob banner. When enabled, its SDK may process IP addresses, technical device data and identifiers, ad interactions and diagnostics to serve, measure and secure ads. Google UMP collects choices where required; these can be changed in ad privacy choices. You may refuse. On iPhone and iPad, Colystria requests Apple tracking permission (ATT) before any Google UMP request, AdMob initialization or ad request. If permission is denied or restricted, these advertising services stay disabled without restricting parcel tracking. If you allow tracking, Google may use the advertising identifier and advertising interactions to measure ads across apps and websites; Colystria requests non-personalised ads and keeps the Google publisher first-party identifier disabled. Apple permission and regional Google choices are separate. You can withdraw Apple permission in device settings and change regional choices in the app. Parcel numbers are not used for advertising. Even these ads may require consent to local storage in some regions. The website does not show AdMob banners.
Purposes, rights and security
Requested tracking is processed to provide the service; optional alerts and advertising choices depend on your choices and consent where required. Security and abuse prevention rely on the publisher’s legitimate interests. The server and its providers may process technical security logs such as IP, date and requested path. International services apply their published transfer safeguards. You may request access, correction, erasure, restriction, portability or other applicable rights at the contact above. You may complain to the CNIL or your local authority. Without an account, use Settings on the same device where possible to identify a watch; never send a password.
Third parties
Also consult the policies of OpenStreetMap, Google, Apple, Mozilla and the queried carrier or data provider. Public store screenshots do not contain personal tracking numbers or real histories. Colystria does not sell your tracking numbers.