Effective 18 October 2026
Privacy policy
In short
Brung reads your Gmail in read-only mode to find parcel tracking numbers. It stores those tracking details on the owner's own server and never stores the content of your emails. It sends the minimum it needs to carriers and to a small number of other services, listed below. It doesn't sell data, show ads, or use your data for anything other than tracking your parcels.
Who we are
Brung (brung.me) is a private parcel tracker. Contact: hej@brung.me. Brung runs on a server controlled by its operator, not on a shared commercial service.
Google data Brung accesses
When you connect a Google account, Brung asks for:
https://www.googleapis.com/auth/gmail.readonly: to read emails so it can find shipping and order messages. Brung cannot send, delete, label or change email.openidandemail: to know which Google account you connected.
Brung only searches messages in your inbox from the time range you choose (1–90 days) that look like shipping or order emails. It does this when you press Check mail, and once a day automatically.
What Brung stores
- Your connected accounts: the email address and a Google refresh token for each. Refresh tokens are encrypted (AES-256-GCM) before they are saved.
- For each parcel found: the carrier, tracking number, shop name and web domain, and, when they appear in the email, the order number and a short description of the items.
- For each email a parcel was found in: the subject, sender, date and Gmail message ID, so you can open the original email in Gmail. A list of message IDs already checked is also kept, so emails aren't read twice.
- Tracking history from the carriers: status, events, places and the expected delivery date.
Brung does not store the body or attachments of any email. Email content is processed in memory during a scan and then discarded.
Who data is shared with
Brung shares only what each service needs to do its job:
| Service | What it receives | Why |
|---|---|---|
| Carriers: PostNord, DHL, Bring, UPS, FedEx | The tracking number | To get the parcel's status and history |
| 17TRACK | The tracking number | To track carriers without their own API (e.g. Budbee, Instabox) |
| Anthropic (Claude) | For emails that look like shipping mail but where no tracking number could be found automatically: the sender, subject, date and up to 8,000 characters of the email's plain text | To pick out the tracking number and shop name. Most emails never reach this step. |
| OpenStreetMap (Nominatim) | Place names from tracking events (e.g. a city or postcode) | To place the route on the map |
| Shops' own links | A web request to "Track your parcel" links in shop emails | To find the carrier's tracking page behind the shop's redirect link. This can be turned off. |
Anthropic's handling of data sent through its API is described in its commercial terms and privacy policy.
Brung does not sell, rent or trade data. It doesn't use data for advertising, and it doesn't use email data to train AI models.
Google API Services User Data Policy
Brung's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide Brung's parcel-tracking features to you. It is not used for advertising, it is not transferred to others except as described above to provide those features, and nobody reads it, except where you ask for it or as needed for security or to comply with the law.
How long data is kept
- Parcels stay until you archive or delete them. Tracking stops being refreshed 3 days after delivery, or 120 days after the parcel was first seen.
- When you remove a connected account, its refresh token is revoked with Google and deleted.
- Place-name lookups for the map are cached on the server.
Your choices
- Disconnect an account: in Brung, open Settings and remove it. You can also revoke access at any time at myaccount.google.com/permissions.
- Delete a parcel: parcels you added yourself can be deleted, and any parcel can be archived.
- Delete everything: email hej@brung.me and all data for your accounts will be deleted from the server.
Security
Google refresh tokens are encrypted before they are stored. When the server is reachable from outside its owner's own computer, the app talks to it over HTTPS. Using the app always requires a sign-in session. The server is self-hosted and controlled by its owner.
Changes
If this policy changes, the new version will be posted on this page with a new effective date.
Contact
Questions or requests: hej@brung.me