Privacy Policy

Effective June 16, 2025

EchoShock (“we,” “us,” or “our”) operates https://echoshock.net (the “Service”). This Privacy Policy describes:

1. Information We Collect

   • Personal Data: Email address, hashed password, username.
   • Technical & Usage Data: IP address, browser/OS, pages visited, timestamps, device metrics.
   • Cookies & Tracking: We use only session cookies to keep you logged in. We do not use any persistent, third-party, or analytics cookies.

2. How We Use Your Information

   • Provide, maintain & improve the Service.
   • Authenticate and secure your account.
   • Communicate account-related notices and policy changes.
   • (With consent) Analyze trends via third-party analytics.
   • Send transactional emails (e.g., password resets).

3. Sharing & Disclosure

   • Service Providers: Supabase (hosting & auth), Vercel (deployment).
   • Analytics: We do not currently use any third-party analytics services. If we add them in the future, we will only do so with your opt-in.
   • Legal Requirements: To comply with applicable law or court order.
   • Business Transfers: In connection with a merger or sale.

4. Data Security

   • TLS encryption in transit; AES-256 encryption at rest.
   • Access controls and regular security reviews.

5. Data Retention

   • We retain your account and profile data only as long as your account is active.
   • When you delete your account, we permanently erase your personal data from our systems (subject to any minimal backup retention required by law, which is deleted as soon as legally permissible).
   • We may retain anonymized or aggregated usage data for analytics and service improvement, but it cannot be tied back to you personally.

6. Your Rights & Choices

• Access & Correction: You can view and update your profile at any time via your account settings.
• Deletion: You can delete your account (and all personal data) at any time via your account settings.
• Data Export (Portability): To request a copy of your personal data, please contact us at [support@echoshock.net].
• Cookie Settings: You can disable cookies in your browser (though this may prevent you from staying logged in).
• GDPR (EU users): You have the right to access, correct, export, or erase your personal data.
• CCPA (CA residents): You have the right to know what personal data we collect, request deletion of that data, and opt out of any sale of personal data (we do not sell personal data).

7. Third-Party Links

   • We may link to external sites; we’re not responsible for their privacy practices.

8. International Transfers

   • Data stored on servers in the U.S. by our providers. Your use consents to transfer.

9. Children’s Privacy

   • Not for children under 13 (U.S.) or under 16 (EU). We do not knowingly collect data from minors.

10. Changes to This Policy

    • We’ll post updates here with a new “Effective” date and notify users of material changes.

11. Contact Us

    • Email: support@echoshock.net

By using our Service, you agree to this Privacy Policy.