Privacy Policy

Last updated: October 6, 2026 · Effective: October 20, 2026

1. Who we are

TrackMyI140 ("we", "us", "our") is a tracking dashboard for USCIS I-140 immigration cases. The service is an independent project operated by the TrackMyI140 team. You can reach us at info@trackmyi140.com.

2. What we collect

When you create an account, we collect:

  • Email address — to identify your account and send the monthly progress email.
  • Name — to address you in emails.
  • Password (hashed with bcrypt; we never store it in plain text) — for accounts created with email/password.
  • Google profile info (name, email, profile picture) — only if you sign in with Google.
  • USCIS receipt numbers you register — to fetch status updates from USCIS on your behalf.

We do not collect Social Security Numbers, A-numbers, passport details, or any other immigration document information beyond the receipt number you choose to register.

3. How we use it

  • To check the status of your registered USCIS cases by querying the public USCIS case status system.
  • To send you the monthly progress email (you can opt out anytime in your profile).
  • To improve the service (aggregated, anonymous usage stats).

We do not sell, rent, or trade your account data (email, name, or registered receipt numbers) to third parties. The site shows ads; see section 6 for how our advertising partner uses data.

4. Third parties we share with

  • Google — only if you choose Google sign-in (OAuth). Google receives sign-in confirmations but not your case data.
  • USCIS — public case status lookups on your behalf for the receipt numbers you registered.
  • Email delivery provider — to send transactional and monthly emails.
  • Google Analytics — website usage statistics (see section 5).
  • Advertising partner — places ads on the site (see section 6).
  • Hosting providers — Hetzner (Germany, frontend) and our private server (Quito, backend).

5. Cookies and tracking

We use a session token stored in your browser to keep you signed in.

Google Analytics. We use Google Analytics 4 to understand how visitors use the site — for example, which pages are viewed, how long visits last, approximate location (country/city), and device and browser type. Google Analytics uses cookies and similar technologies to collect this information, and we only see it in aggregate. You can learn how Google uses this data in Google's Privacy Policy: https://policies.google.com/privacy. You can opt out with the Google Analytics opt-out browser add-on.

Advertising cookies. Our advertising partner (section 6) may use cookies and similar technologies to show and measure ads. You can manage these through your browser settings and, where offered, the consent or privacy choices shown on the site.

6. Advertising

Advertising.

CMI Marketing, Inc., d/b/a Raptive (“Raptive”) is a service provider of this Site for the purposes of placing advertising on the Site, and Raptive will collect and use certain data for advertising purposes. To learn more about Raptive's data usage, click here: https://raptive.com/creator-advertising-privacy-statement/

7. Data retention & deletion

We keep your account and registered cases for as long as your account is active. You can delete your account at any time in two ways:

  • Self-service: sign in, go to your profile page, scroll to "Danger zone", and click "Delete my account". The deletion is immediate.
  • By email: send a request to info@trackmyi140.com from the email address you registered with. We process these within 30 days.

Deletion removes your profile, tracked cases, email history, and waitlist entries. Aggregate analytics events are anonymised (disconnected from your identity, kept only as counts). The underlying USCIS case records remain in our database as public data, with no link back to you.

8. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your account and associated data (see section 7).
  • Unsubscribe from emails at any time (link in every email + toggle in profile).
  • Export your data (CSV format, on request).

To exercise the rights that don't have a self-service path on the site, email info@trackmyi140.com.

9. Security

Passwords are stored hashed using bcrypt. Communication between your browser and our servers is encrypted via HTTPS. Backups are encrypted and access to production data is restricted to the project operator. No system is 100% secure; in the unlikely event of a breach we will notify affected users by email within 72 hours.

10. Children

This service is not intended for users under 18 years old. We do not knowingly collect data from minors.

11. Changes to this policy

We may update this policy. Material changes will be communicated by email at least 14 days before they take effect. The "Last updated" date at the top of this page will always reflect the current version.

12. Contact

Questions about this policy: info@trackmyi140.com