Private tracking, by design.

For the MVP, tracking is available inside signed-in customer accounts so we never expose another customer's delivery data. Public lookup by order number and phone can arrive later without weakening the current privacy boundary.