ShipStation

Overview

ShipStation is a cloud-based shipping and order fulfillment platform used by e-commerce businesses to manage multi-carrier shipping, print labels, automate fulfillment workflows, and track deliveries. It integrates with over 300 selling channels and carriers including Shopify, WooCommerce, BigCommerce, Amazon, USPS, UPS, FedEx, and DHL. ShipStation operates primarily as a backend SaaS tool used by merchants internally; its customer-facing web presence is limited to branded tracking pages and customer notification emails. When detected on a website, ShipStation typically appears through embedded order tracking pages where customers look up shipment status.

What This Script Does

ShipStation's customer-facing web presence is limited to order tracking embeds. There is no behavioral analytics or marketing tracking script that ShipStation deploys on retailer websites.

Order tracking page embeds:

• ShipStation provides branded tracking pages hosted at tracking.shipstation.com or similar, which can be embedded on retailer websites via iframe
• These pages display: shipment status, carrier name, tracking number, estimated delivery date, and package event history
• Retailers often link directly to the ShipStation tracking URL from order confirmation emails rather than embedding it on-site

Script behavior when embedded:

• The tracking page iframe loads from ShipStation's domain; all script execution is sandboxed within the iframe context
• A tracking lookup is performed against ShipStation's API using the order number or tracking ID provided by the visitor
• Results are rendered within the iframe displaying carrier-reported shipment events

Cookies set:

• Session cookies within the iframe, scoped to shipstation.com — these maintain the tracking lookup result state during the current browser session
• No persistent tracking cookies are set on the retailer's domain
• No cookies used for behavioral tracking, advertising, or cross-site identification

Data collected:

• Order tracking lookups: the visitor submits an order number or email/ZIP combination to retrieve their shipment
• Carrier-reported tracking events are fetched and displayed (no visitor behavioral data is collected)
• No browsing behavior on the retailer's host website is monitored or recorded

No marketing tracking: ShipStation does not deploy advertising pixels, retargeting tags, or behavioral analytics scripts on retailer websites. Its integration is purely backend order management.

Consent & Compliance

ShipStation falls under the functional consent category. Under GDPR and ePrivacy, order tracking embeds serve a functional purpose — providing shipment status information that the customer explicitly requests by navigating to a tracking page. Session cookies within the iframe are scoped to ShipStation's domain and are required for the tracking lookup interaction. The ePrivacy Directive's exemption for services directly requested by the user applies.

Under CCPA/CPRA, order tracking data (order numbers, shipping addresses, delivery status) constitutes personal information processed for the requested fulfillment service. ShipStation acts as a data processor for the merchant; merchants should have a DPA in place. ShipStation is a US-based company (owned by Auctane); EU data transfers rely on Standard Contractual Clauses.

Should You Block This Without Consent?

No. ShipStation's customer-facing components serve a functional purpose — order tracking that customers explicitly use. The platform has no marketing or analytics tracking scripts on the retailer's website. Blocking it would remove order tracking capability. Session cookies within the iframe are technically necessary for the lookup interaction and are exempt from consent requirements.