Starship
starship / search / shipping-tracker

Audit report

Shipping Tracker by DevCloud

Broad accessReach : limited

by Dev Cloud · Orders and shipping · Shopify App Store

Orders and shipping
Risk level
Broad access
Executive summary

Track your shipments in an easy and fancy way

Key insights

  • ◆Order tracking app with multi-carrier support, branded pages, and email/SMS notifications
  • ◆Publisher 'Dev Cloud' / DevCloudSoftware operates from devcloudsoftware.com with valid HTTPS and HSTS enabled
  • ◆Privacy policy does not mention any LLM/AI usage or compliance certifications
  • ◆Declared access: store owner name, email, phone, physical address (low-sensitivity merchant data)

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Track your shipments in an easy and fancy way

Key insights
  • ◆Order tracking app with multi-carrier support, branded pages, and email/SMS notifications
  • ◆Publisher 'Dev Cloud' / DevCloudSoftware operates from devcloudsoftware.com with valid HTTPS and HSTS enabled
  • ◆Privacy policy does not mention any LLM/AI usage or compliance certifications
  • ◆Declared access: store owner name, email, phone, physical address (low-sensitivity merchant data)
  • ◆No 'Built for Shopify' badge
  • ◆No known CVEs or public breach incidents attributed to Dev Cloud or this app
  • ◆Privacy policy mentions ad serving companies as third-party recipients
  • ◆Hosting region appears to be USA (per privacy policy)

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

store_owner_information
Low

Store owner name, email, phone, and physical address required for app onboarding and support contact

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
devcloudsoftware.com
TLS grade
A
HSTS
Enabled
CSP
Missing

HSTS enabled with max-age=63072000 (2 years); no Content-Security-Policy header set; nginx 1.18.0 on Ubuntu disclosed in Server header

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

Privacy policy exists but does not claim any compliance certifications; mentions cross-border data transfers

Privacy policy
Track record

Publisher reputation

Publisher
Dev Cloud
Verified Shopify Partner
No
Years active
0
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.