Cookie Policy

This Cookie Policy explains what cookies are, which ones Echoia uses on its website and application (the "Service"), and how you can control them. It complements our Privacy Policy.

1. What cookies are

Cookies are small text files placed on your device by a website. They let the site remember your session and preferences between pages and visits. Similar technologies — such as localStorage — store small amounts of data in your browser for the same purposes; this policy covers them too.

2. The short version

This public website sets no analytics cookie at all. Inside the app, once you are signed in, we set the cookies that keep you signed in plus one identifier for product analytics, which tells us which features are used and where people get stuck.

We use no advertising cookies, no cross-site tracking, and no third-party script watching you browse: the analytics requests are served from our own domain and the data is stored in the European Union. That is why the website shows no consent banner. Signing in is a different matter, and the analytics identifier is described in our Privacy Policy.

3. Cookies we use

• Session & authentication — keeps you signed in to your account and protects your session against forgery (CSRF). Lifetime: your session, or up to 30 days if you stay signed in. Without these, you cannot log in.
• Connection security (OAuth state) — short-lived cookies (a few minutes) set while you connect a social platform, used to verify that the response coming back from the platform matches the request you started. They protect your account-linking flow against interception.
• Workspace preference — remembers which of your workspaces is active, so the app opens where you left off.
• Interface preferences (localStorage) — theme, accent color and similar display settings, stored in your browser only and never transmitted to us as tracking data.
• Product analytics, in the signed-in app only: an identifier that lets us count how a feature is used across your visits, so we can tell a screen nobody reaches from one nobody needs. It carries no content: not a post, not a message, not a comment, not a file name. Served from our own domain, stored in the European Union by PostHog. Blocking it costs you nothing in the product.

4. What we do not use

• No advertising or retargeting cookies.
• No analytics cookie on this public website.
• No third-party analytics script following you across sites.
• No social media tracking pixels on our pages.
• No sale or sharing of cookie data with data brokers.

5. How to control cookies

You can delete or block cookies at any time in your browser settings (look for "Cookies and site data"). Blocking the ones that keep you signed in will prevent signing in and connecting accounts. Blocking the analytics identifier changes nothing for you, and the public website keeps working either way.

6. Changes

If we ever introduce a non-essential cookie (for example privacy-friendly analytics), we will update this policy first and ask for your consent where the law requires it. The "Last updated" date above always reflects the current version.

7. Contact

Questions about cookies or privacy? Write to contact@echoia.io.