A link you can send anyone, that tells them nothing about your customer

Tracking links get texted, pasted into group chats, and left open on shared phones. So the page is assembled from a deliberately narrow set of facts rather than a customer record with the private parts stripped off.

It carries what was ordered, where it is, and when it lands. Not the name, address, phone number or email of the person who placed it. The fifth person in the group chat learns that a pizza is in an oven.

The arrival time is worked out once, when the promise is made, and then it stands. Recomputing it on every refresh would push it forward each time somebody looked — which is exactly the behaviour that teaches people a tracker is lying to them.

Staff see "on the pass". The customer sees "nearly ready". Each stage carries its own customer-facing wording, and stages are hidden from customers by default — "chasing supplier" is a real step in your process and nobody else's business.