Cookie Policy

This Cookie Policy explains what cookies are, which ones Echoia uses on its website and application (the "Service"), and how you can control them. It complements our Privacy Policy.

1. What cookies are

Cookies are small text files placed on your device by a website. They let the site remember your session and preferences between pages and visits. Similar technologies — such as localStorage — store small amounts of data in your browser for the same purposes; this policy covers them too.

2. The short version

This public website sets no analytics cookie of our own. Inside the app, once you are signed in, we set the cookies that keep you signed in plus one identifier for product analytics, which tells us which features are used and where people get stuck.

We advertise on Google. To measure whether those ads lead to sign-ups and purchases, this website and the app's sign-up, sign-in and billing pages load the Google Ads tag, which can set Google advertising cookies. Our own analytics requests are served from our own domain and the data is stored in the European Union. The analytics identifier is described in our Privacy Policy.

3. Cookies we use

• Session & authentication — keeps you signed in to your account and protects your session against forgery (CSRF). Lifetime: your session, or up to 30 days if you stay signed in. Without these, you cannot log in.
• Connection security (OAuth state) — short-lived cookies (a few minutes) set while you connect a social platform, used to verify that the response coming back from the platform matches the request you started. They protect your account-linking flow against interception.
• Workspace preference — remembers which of your workspaces is active, so the app opens where you left off.
• Interface preferences (localStorage) — theme, accent color and similar display settings, stored in your browser only and never transmitted to us as tracking data.
• Product analytics, in the signed-in app only: an identifier that lets us count how a feature is used across your visits, so we can tell a screen nobody reaches from one nobody needs. It carries no content: not a post, not a message, not a comment, not a file name. Served from our own domain, stored in the European Union by PostHog. Blocking it costs you nothing in the product.

4. What we do not use

• No advertising cookies other than the Google Ads tag described above.
• No analytics cookie of our own on this public website.
• No Google tag on the app pages where you work on your posts and messages.
• No social media tracking pixels on our pages.
• No sale or sharing of cookie data with data brokers.

5. How to control cookies

To limit how Google uses advertising cookies, visit Google's ad settings. Blocking Google cookies in your browser changes nothing for you on Echoia.

You can delete or block cookies at any time in your browser settings (look for "Cookies and site data"). Blocking the ones that keep you signed in will prevent signing in and connecting accounts. Blocking the analytics identifier changes nothing for you, and the public website keeps working either way.

6. Changes

If we introduce any other cookie, we will update this policy first. The "Last updated" date above always reflects the current version.

7. Contact

Questions about cookies or privacy? Write to contact@echoia.io.