How Traxelio Protects Your Personal Data on Public Pages

You share an order link with your accountant. You send an invoice via WhatsApp to a colleague for approval. You forward a quote to your business partner for their input.

In each case, the link is public. Anyone with the URL can open it. And until recently, anyone with that link could also see the customer's full name, email address, and phone number.

This is not a hypothetical scenario. It is the default behavior of most e-commerce platforms. The order link displays customer information in plain text. So does the invoice. So does the quote. Nobody thinks about it, until someone who should not have seen that information does.

What We Changed

Traxelio now automatically masks personal information on all public order, invoice, and quote pages.

If you are not logged in as the order owner, here is what you see:

The order owner still sees their own information in full. This is an important distinction: the protection applies to third parties, not to the customer themselves.

Why This Matters

Consider a real scenario. You manage a vehicle fleet in Dakar and you order 5 GPS trackers. The order link is sent by email. You forward it to your logistics manager for tracking. Your logistics manager shares it in the team WhatsApp group.

Without masking, every person in that group sees your name, your email, and your phone number. Not because you consented to share that information with them, but because the system did not differentiate between the owner and a visitor.

With masking, your manager sees the order, the items, the amount, the delivery status. Everything they need to do their job. But they do not see your personal information.

It is the same principle as when you receive a bank statement: the account number is partially masked. You know it is yours, but if someone else finds it, they cannot exploit it.

How It Works

The system checks the identity of the person viewing the page. Two possible cases:

You are logged in and it is your order. The system detects that you are the owner. You see all your information normally, including your phone number and full email. You can also use the payment form pre-filled with your email.

You are not logged in, or it is not your order. The system applies partial masking:

• The name is masked, keeping only the first letter of each word. "Fatou Ndiaye" becomes "F**** N*****".
• The email keeps the first two letters before the @. "[email protected]" becomes "fa****@orange.sn".
• The phone number is completely hidden. It does not appear at all.

This masking applies on three pages: the order page, the invoice, and the quote. The same mechanism, applied everywhere.

There is no "show information" button. No unlock link. If you are not the owner, you do not see the data. It is that simple.

The Broader Data Protection Picture

Masking personal information is one piece of a larger puzzle. When you use a vehicle geolocation platform, you are entrusting it with sensitive data: GPS positions, trip histories, driver identities.

In Senegal, the personal data protection law governs the collection and processing of this information. The Commission de Protection des Donnees Personnelles (CDP) ensures that companies respect principles of proportionality, purpose limitation, and security.

Traxelio takes these obligations seriously. Here is what we do beyond masking:

Encryption in transit and at rest. All communications between your browser and our servers are encrypted (HTTPS). Stored data is also encrypted.

Account isolation. Your fleet data is only visible to users on your account. No customer can see another customer's data.

Encrypted backups. Daily backups are encrypted before being sent to remote storage. If you want to see how we manage our monitoring infrastructure, we detailed our approach in the article about the public status page.

No data resale. Your position data, your personal information, your driving patterns: nothing is shared with third parties for advertising or commercial purposes.

The Parallel With Our Visitor Intelligence

We recently shared how we recovered a lost sale through visitor intelligence. That system collects behavioral data to improve the customer experience. But there is a clear boundary: anonymous behavioral data (pages visited, time spent) serves to improve the product. Personally identifiable information (name, email, phone) is protected and masked as soon as it appears in a context where a third party could access it.

That is the difference between observing that a visitor checked the pricing page three times this week (useful for offering help) and displaying their name and email to anyone who opens an order link (a privacy violation).

This distinction matters more than most companies realize. The same data that helps you serve customers better can harm them if it leaks into the wrong context. A visitor's browsing behavior, aggregated and anonymized, improves the product for everyone. A customer's phone number, displayed on a shared invoice link, benefits no one and creates risk.

Our approach is consistent across the platform: collect behavioral data to improve the experience, protect identity data by default. No exceptions.

A Standard, Not a Feature

Many platforms treat data protection as a premium add-on. Pay more, get encryption. Upgrade your plan, get access controls. We think that is backwards.

Every Traxelio account, from the Basic plan to Premium, gets the same level of data protection. The same masking on public pages. The same encryption. The same account isolation. The same backup policy. Data protection is not a selling point. It is a baseline.

When you integrate payment methods like Orange Money into a checkout flow, every step of that transaction involves personal data: names, emails, phone numbers, payment references. The system handling those transactions should protect that data at every layer, not just the payment gateway.

What This Means for You

If you are a customer, you do not need to do anything. Masking is active by default on all public pages. The next time you share an order or invoice link, personal information will be automatically protected.

If you manage a fleet and you are comparing GPS solutions available in Dakar, data protection is a criterion that does not appear on any comparison sheet. But it is a criterion that matters. When a provider displays your customers' information in plain text on link-accessible pages, that is a risk you are taking without knowing it.

We build Traxelio for fleet managers and vehicle owners in West Africa. If you are looking for a platform that protects your data as well as it tracks your vehicles, create your account and see for yourself.