·Cookie Policy
Last updated: October 20, 2026
This policy lists the cookies and local storage Echo uses, what each one does, and how to control them. Echo keeps its use of storage to what the product genuinely needs.
Echo does not use advertising cookies, does not sell advertising data, and does not share your browsing behaviour with advertising networks.
1. What cookies and local storage are
A cookie is a small text file a website asks your browser to store and send back on later requests. Local storage and session storage work the same way, except the values stay in your browser and are never sent to the server unless the page explicitly reads and sends them. Together they let a site keep you signed in, remember your choices and understand how it is being used.
2. Strictly necessary cookies and storage
These are required for Echo to work. They are set whether or not you accept optional analytics, and cannot be switched off while you use Echo.
| Name | Purpose | Type |
|---|---|---|
__session, __client_uat | Set by our sign-in provider (Clerk). They keep you signed in across pages and devices and protect the sign-in flow. | Cookie, HTTP-only |
echo-workspace | Remembers which workspace you last worked in so the dashboard opens in the right place. | Cookie |
echo_github_oauth_state, echo_git_oauth_state | Protect the source-control sign-in flow against cross-site request forgery. They are discarded when the connection completes. | Cookie, HTTP-only |
echo_github_token | A cookie used by an earlier version of the GitHub connection. Echo no longer reads it and clears it whenever your account is changed. | Cookie, HTTP-only |
3. Analytics and performance
Echo measures how the product is used so we can find what is slow and what is broken. These measurements are optional: they are only collected when your stored consent allows it.
| Name | Purpose | Type |
|---|---|---|
echo_consent_v1 | Stores your analytics and session-replay choices so every provider Echo loads honours the same decision. | Local storage |
echo_attribution_v1 | Stores campaign parameters and the referring page for the current visit, so we can attribute sign-ups to a campaign. | Session storage |
_ga, _ga_* | Set by Google Analytics 4 when it is enabled for a deployment. They distinguish visitors and sessions, with IP anonymisation enabled. | Cookie |
_clck, _clsk | Set by Microsoft Clarity when it is enabled for a deployment. They support session replay and heatmaps. | Cookie |
ph_* | Set by PostHog when it is enabled for a deployment. They keep a pseudonymous visitor identifier and, if session replay is separately enabled, the replay session. | Local storage |
Echo also uses Vercel Analytics and Vercel Speed Insights for aggregated page-view and performance measurement. These run in cookieless mode and do not set cookies or build a profile of you across sites.
Sentry provides error monitoring in production. Before an error report is sent, Echo removes the authorization, cookie, x-api-key and webhook-signature headers, and redacts fields whose names suggest prompts, code, secrets, keys, tokens or credentials.
4. Preferences
Echo remembers interface choices in your browser so the product feels the same each time you open it.
| Name | Purpose | Type |
|---|---|---|
echo-language | Remembers your chosen interface language. | Local storage |
theme | Remembers your light, dark or custom theme selection. | Local storage |
5. No advertising cookies
Echo does not use advertising cookies, does not run advertising pixels, and does not share or sell your information with advertising networks or data brokers. The optional analytics described in section 3 are limited to measuring the product itself.
6. Managing your choices
- Analytics — your choice is stored in your browser under
echo_consent_v1. You can change that stored preference at any time, or ask us to record the preference on your account, and Echo will apply it. - Browser controls — your browser can block or delete cookies and site data for echoagent.space. Blocking strictly necessary cookies will stop you from staying signed in.
- Sign out — signing out of Echo clears the authentication cookies for the site.
7. Contact information
If you have a question about cookies, local storage or your privacy choices, contact us:
- Email — founder@echoagent.space
- X (Twitter) — https://x.com/EchoBuildNivo
See also the Privacy Policy and the Contact & Support page.