Privacy Policy

Last reviewed August 2026. This is a plain-language starting point, not legal advice; have it reviewed before relying on it.

What we collect

• Account: username, email, password (hashed), and a display handle.
• Profile: anything you add — display name, location, bio, favorite song, avatar image, badge, podium.
• Activity: your collection, wantlist, ratings, comments, forum posts and reactions, lists, friends, and direct messages.
• Usage analytics: page views and product events (e.g. “added a record”), tied to your account or a random device id. No third-party ad trackers.
• Technical: IP address and request logs, kept short-term for security and debugging.

How we use it

To run the service, show your public profile and contributions to other members, send account email (like password resets), keep the platform safe, and understand what’s working. We do not sell your personal data.

What’s public

Your handle, profile, collection, wantlist, ratings, lists, forum posts, and comments are visible to anyone. Your email and direct messages are not public. Hidden copies in your collection are only visible to you.

Sharing

We share data only with the infrastructure providers needed to operate (hosting, database, email delivery, image storage), and when required by law.

Your choices

You can edit or remove most content at any time. Deleting your account (Settings → Delete account) removes your profile and content; shared catalog contributions may be retained as an anonymous community record. Email us to request a copy of your data.

Children

Echo Exchange is not for children under 13 (under 16 in the EEA/UK).

Contact

Privacy questions: use the contact address published on the site.