Privacy Policy

    Last updated: September 3, 2026

    Introduction

    Welcome to Studio Echo. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our platform.

    Information We Collect

    Account Information

    • Username and display name
    • Email address (for authentication)
    • Profile picture and cover image (optional)
    • Bio and profile information (optional)

    Content You Create

    • Articles and reviews you publish
    • Comments and forum posts
    • Watchlist entries and ratings
    • Voting activity on posts and comments (kept private)

    Usage Data

    • Email notification preferences
    • Profile visibility settings
    • Affiliate link clicks (anonymized, without IP addresses)

    How We Use Your Information

    • Account Management: To create and maintain your account
    • Content Display: To show your public content to other users (respecting your privacy settings)
    • Communications: To send you notifications based on your preferences
    • Platform Improvement: To analyze usage patterns and improve our services
    • Security: To protect against unauthorized access and abuse

    Your Privacy Controls

    Profile Visibility

    By default, your profile is set to private. You can change this in your profile settings. When private, only you can see your full profile information. When public, other users can view your profile, bio, and public activity.

    Anonymous Posting

    Authors can choose to publish articles anonymously. When enabled, your authorship will not be displayed to readers, though you'll still be able to manage your own anonymous content.

    Voting Privacy

    Your voting activity on posts and comments is completely private. Only you can see which posts and comments you've voted on. Vote counts and scores are public, but individual voting patterns are never exposed.

    Data Security

    We implement industry-standard security measures to protect your data:

    • All data is encrypted in transit using HTTPS/TLS
    • Passwords are securely hashed and never stored in plain text
    • Row-Level Security (RLS) policies enforce data access controls
    • Regular security audits and updates
    • Content sanitization to prevent XSS attacks

    Data Retention

    We retain your data as follows:

    • Account Data: Retained while your account is active
    • Content: Retained until you delete it
    • Affiliate Clicks: Automatically deleted after 90 days
    • Activity Logs: Minimal logging, retained for security purposes only

    Third-Party Services

    Studio Echo uses the following third-party services:

    • Authentication: Secure email-based authentication
    • Storage: Secure cloud storage for images and documents
    • Anime Data: MyAnimeList API for anime/manga information (no personal data shared)
    • Advertising: Google AdSense (subject to Google's privacy policy)

    Your Rights

    You have the right to:

    • Access your personal data
    • Correct inaccurate data
    • Delete your account and associated data
    • Export your data
    • Opt-out of email notifications
    • Control your profile visibility

    Children's Privacy

    Studio Echo is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

    Changes to This Policy

    We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

    Contact Us

    If you have questions about this privacy policy or how we handle your data, please contact us through our contact form or email us directly.

    GDPR Compliance

    For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). This includes your rights to access, rectification, erasure, restriction of processing, data portability, and objection to processing.

    Our lawful basis for processing your data includes:

    • Contract: Processing necessary to provide our services
    • Consent: For optional features and communications
    • Legitimate Interest: For security, fraud prevention, and platform improvement