Privacy Policy

Last updated: May 16, 2026

Echo is operated by Nick Stewart ("I", "me", or "my"). This policy explains what data I collect when you use echowidget.com, why I collect it, and what I do with it. I've tried to keep this plain and honest.

What I collect

I collect different information depending on how you use Echo:

• Waitlist signups: your email address, and the date you signed up.
• Dashboard accounts: your email address and a hashed password, managed through Supabase Auth.
• Widget responses: the reaction a reader selects (Loved it / It was okay / Missed for me), any optional written feedback they leave, and their email address if they choose to provide one. I also store the newsletter and post the response belongs to, and the timestamp.

I do not run any analytics, ad tracking, or third-party tracking scripts on this site.

How I use it

• Waitlist emails are used only to notify you when Pro features launch. I will not email you for any other reason.
• Account data is used to authenticate you and associate your newsletters and response data with your account.
• Widget response data is displayed to the newsletter writer whose post the widget is embedded in. It is not shared with anyone else.

Who I share data with

I use Supabase to store all data and handle authentication. Supabase acts as a data processor on my behalf and stores data on servers in the United States. You can read Supabase's privacy policy at supabase.com/privacy.

I do not sell your data. I do not share it with advertisers or any other third parties.

Data retention

I keep your data for as long as your account is active. If you'd like your data deleted, email me at privacy@echowidget.com and I'll remove it within 30 days.

Reader responses submitted through the widget are retained until the newsletter owner deletes them or their account is closed.

Cookies and local storage

Echo uses browser local storage to keep you signed in to the dashboard. No advertising cookies are used. No third-party cookies are set.

Your rights

You can ask me to:

• Tell you what data I hold about you
• Correct inaccurate data
• Delete your data

To make any of these requests, email privacy@echowidget.com.

Children

Echo is not directed at children under 13 and I do not knowingly collect data from them.

Changes to this policy

If I make meaningful changes to this policy I'll update the date at the top of this page. For significant changes, I'll also notify dashboard users by email.

Contact

Questions? Email me at privacy@echowidget.com.