Tracking numbers are an issue that nobody seems to be talking about except me. I've brought it up a few times. It's pointless to encrypt your address if the vendor sends you a plaintext tracking number in an SR message. In fact, it's much worse, because addresses are deleted from the server when the order is marked in transit, but SR messages are stored on the server for 3 months, even after you delete them. You can include a statement along with your encrypted address to tell the vendor not to send a tracking number, but they might forget or not care or confuse your request with another customers and send it anyway. Ultimately vendors should just stop doing it. You only need a tracking number if the product didn't arrive, and vendors will save time by not messaging everyone with their tracking numbers.