Cookie Policy
Last updated: 1 November 2026
What cookies are
Cookies are small text files that websites store on your device. Together with similar technologies (such as the browser's local storage, called localStorage) they let you sign in, remember your preferences and, with your consent, measure how the service is used. This page explains which ones we use and how to manage your choices.
Necessary cookies and technologies
These are essential to run the service and do not require consent. Without them some features (such as signing in) would not work. echoflow uses a technical cookie, which the pages' code cannot read (httpOnly), to keep your sign-in session and the browser's localStorage to remember the interface language and light/dark theme, the choice you make on the cookie banner, a few display preferences (for example the notices you have already dismissed) and the state of steps in progress, such as signing in, email verification, an invitation or a purchase. When you sign up, localStorage also keeps a random browser identifier (echoflow_device), generated on the spot and not derived from your device: we only receive a fingerprint of it, used solely to prevent free trials from being opened over and over. The email-and-password sign-up form also loads Cloudflare Turnstile, an anti-bot check strictly necessary for the security of the service: it sets no echoflow.it cookies and is not used for advertising or profiling; the data it processes is described in the privacy policy.
Analytics cookies
They help us understand, in aggregate and where possible anonymous form, how the service is used so we can improve it. We use Google Analytics 4 (loaded via Google Tag Manager), a Google service: the data collected is handled under Google's privacy policy. It is enabled only with your consent and you can withdraw it at any time.
Marketing cookies
They are used to measure campaign effectiveness and show you relevant content, possibly via third parties. We use Google's advertising tools (Google Ads), subject to the same Google privacy policy. They are enabled only with your explicit consent. With the same consent we store in localStorage which campaign, and which page, first brought you here (echoflow_first_touch) and the identifier of the last ad you clicked (echoflow_gclid): if you decline or withdraw consent they are not stored, and any already stored are deleted.
Cookie-free usage measurement
To know what kind of device the service is used on, which pages are viewed and how long people stay on them, we collect our own statistic, with no third-party service, that stores nothing on your device: no cookies, no localStorage, no identifier that follows you from one visit to the next. We record the page (without content identifiers and without address parameters), how long the page stayed visible, the screen width, the language and theme, the referring site if any, three page-speed indicators, whether you are signed in and on which plan, and a generic device classification (for example «phone, Android, Chrome») derived before recording: your IP address and the full browser string are not kept. The data is aggregated, cannot be traced back to you or your account, is kept for 180 days and is not shared with anyone. Because of this the measurement does not require consent; if your browser sends a do-not-track signal (Do Not Track or Global Privacy Control) we honour it anyway and record nothing.
Third-party cookies
Some features rely on third-party providers (for example payment via Stripe, Google sign-in, if you choose to use it, or the Cloudflare Turnstile anti-bot check at sign-up). These parties may set their own cookies under their respective policies. We do not sell your data.
How to manage your preferences
You can accept, reject or customize categories from the banner shown on your first visit, and reopen your choices at any time from the link below. You can also block or delete cookies from your browser settings; if you do, some features may not work correctly.
Contact
For any request about cookies or privacy you can write to privacy@echoflow.it.
Category summary
| Category | Purpose | Legal basis | Duration |
|---|---|---|---|
| Necessary | Sign-in session, security, language and theme, cookie choice, display preferences | Legitimate interest / service performance | Session cookie up to 30 days · localStorage with no expiry (until you clear it) |
| Analytics (Google Analytics 4) | Aggregated usage statistics | Consent | Up to 24 months |
| Marketing (Google Ads) | Campaign measurement, relevant content | Consent | Up to 24 months |
| Usage measurement (no cookies) | Aggregate, anonymous statistics on device, pages viewed and time spent | Legitimate interest — nothing stored on your device, no personal data kept | 180 days |
To change your cookie choices .