Privacy Policy
Last updated: May 27, 2026
This policy explains what information EchoForge ("we", "us") collects when you use https://www.echoforgegear.com, how we use it, and your rights regarding that information.
1. Information we collect
We collect two kinds of information:
- Information you give us — for example, when you create an account: your email address, chosen username, avatar selection, and any profile information you provide.
- Information collected automatically — basic analytics data (pages visited, device/browser type, approximate location based on IP, referrer URL), site interaction events used to award XP and complete missions, and cookies described in Section 4.
2. How we use your information
- To create and manage your EchoForge account.
- To track your gaming missions, XP, and leaderboard position.
- To save and share loadouts you create.
- To measure site usage so we can improve EchoForge.
- To respond to messages you send us.
3. Third-party services
EchoForge uses the following third-party services that process some of your data:
- Firebase (Google) — authentication, database, and storage. Subject to Firebase's privacy policy.
- Google Gemini API — powers the AI assistant. Queries sent to the assistant are processed by Google.
- Vercel — hosts EchoForge and collects basic server logs.
- Google Analytics 4 — we use GA4 (measurement ID G-8LFZNRRPH5) to understand how visitors use EchoForge. GA4 collects pages visited, approximate location (city/country, not address), device/browser type, and an anonymous user identifier. We do not share this data with third parties. Google's privacy policy applies. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
- Amazon Associates — we use Amazon affiliate links; Amazon may set its own cookies when you follow them.
4. Cookies & local storage
EchoForge uses your browser's localStorage to remember your session (so you stay logged in), your saved loadouts, and your daily-missions progress. We do not use third-party advertising or tracking cookies. Firebase Authentication may set its own cookies to maintain your sign-in state.
5. Your rights
You may, at any time:
- Access or update your profile information from your account page.
- Delete your account and the data associated with it — email us at contact@echoforgegear.com and we will delete your account and personal data within 30 days.
- Opt out of analytics by enabling Do Not Track in your browser or clearing site data.
If you are in the EU, UK, or California, additional rights apply under GDPR/CCPA. To exercise them, email us.
6. Data retention
We retain account data for as long as your account exists. Anonymized analytics data may be retained indefinitely. Logs are kept for 90 days for security and debugging.
7. Children
EchoForge is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe we have, please email us so we can delete it.
8. Changes
If we change this policy materially, we'll update the "Last updated" date above and (where required) notify account holders by email.
9. Contact
Questions: contact@echoforgegear.com.