Skip to content

Privacy Policy

Last updated: September 22, 2026

Introduction

EchoLoRA (“we,” “our,” or “us”) is committed to protecting your privacy. This policy describes how we collect, use, and safeguard your information when you use our website and services.

Information We Collect

We may collect information you provide directly (e.g., account registration, email, contact forms), information collected automatically (e.g., device, browser, IP address, pages visited), and information from cookies and similar technologies.

Uploads, scanning, and reports

If you upload audio, we store the file, any cover art and lyrics you include, and the results of processing. That processing includes a malware scan when virus scanning is configured on our servers, transcription of the recording, and a comparison of those lyrics and of lyrics you paste against other songs on EchoLoRA. We keep the scan result, the originality review, and whether a track was held from public rotation.

Creator profile fields you save (display name, bio, and links) are public by default, along with songs you publish. Draft songs are not shown on your public profile.

If someone reports a song, we store the report reason, optional details, the song, and the account or guest identifier of the person who sent it, so we can review copyright and other policy issues.

Advertising and Third-Party Services

We use third-party advertising partners to display ads on our service. These partners may collect information about your visits to our site and other sites to provide you with relevant advertisements. This may include the use of cookies, web beacons, and similar technologies.

Our advertising partners have their own privacy policies governing how they use the data they collect. We encourage you to review their policies. Ad networks we may work with include providers such as Google (e.g., Google AdSense, Google Ads). You can manage your ad preferences and opt out of personalized advertising through tools like Google Ads Settings and the Digital Advertising Alliance.

Cookie Policy

We use cookies and similar technologies (including localStorage and sessionStorage) for analytics, security, advertising, and to improve your experience. By using EchoLoRA, you consent to our use of these technologies as described below. You can manage your preferences via the cookie banner when you first visit, or through your browser settings.

Types of Technologies We Use

1. Google Analytics

We use Google Analytics (GA4) to understand how visitors use our site-pages visited, time on site, and engagement. Google may set cookies such as _ga, _gid, and _gat. Analytics loads only after you accept our cookie banner. You can also opt out globally via the Google Analytics Opt-out Add-on.

2. Cloudflare Turnstile

Our contact form uses Cloudflare Turnstile for bot detection. Turnstile may set cookies when you submit the form to verify you are human. This is essential for preventing spam and abuse.

3. Essential Site Data (localStorage & sessionStorage)

We store data in your browser to provide core functionality:

  • Authentication - echolora_user, echolora_token - to keep you logged in
  • Preferences - volume, playlist visibility, lyrics toggle, tab selections, favorites, playlists, stations
  • Guest ID - echolora_guest_id - for anonymous usage tracking
  • Session flags - load timestamps to avoid duplicate initialization

4. Advertising Cookies (when used)

We may use third-party advertising (e.g., Google AdSense, Google Ads). These partners may set cookies and use web beacons to deliver relevant ads and measure effectiveness. You can manage ad preferences at Google Ads Settings and Digital Advertising Alliance.

5. Cookie Consent

We store your cookie consent choice in localStorage (echolora_cookie_consent) so we do not show the banner repeatedly. Clearing this will show the banner again on your next visit.

How We Use Your Information

We use collected information to operate and improve our services, personalize your experience, analyze usage, deliver relevant ads, communicate with you, and comply with legal obligations.

Data Sharing

We may share information with advertising partners, analytics providers, and service providers who assist in operating our service. We do not sell your personal information. We may disclose information when required by law or to protect our rights and safety.

Families and Children

Depending on the countries where our app is available, some or all of our users may be considered children. We comply with the Families policy and applicable children's privacy laws whenever our services are used by a child.

Content

We ensure that any content in our app that could be seen by children is appropriate for them. Content moderation and age-appropriate safeguards are applied where required.

Advertising When Used by Children

When our app is being used by a child, we only display ads that are appropriate for children. Additionally, whenever our app is used by a child, we only display ads from Google Play certified ad networks, or ads served directly by us. This includes ads for our own apps or from approved partnerships with other brands.

Legal Compliance

Our app (including all APIs, SDKs, and ads) complies with all applicable laws and regulations relating to children, including but not limited to the U.S. Children's Online Privacy Protection Act (COPPA) and the EU General Data Protection Regulation (GDPR). We obtain verifiable parental consent where required before collecting, using, or disclosing personal information from children.

Age Screening

We either make our entire app compliant with Families policy requirements, or implement a neutral age screen to identify child users and apply the appropriate safeguards, content restrictions, and ad policies when the user is a child.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data. You may opt out of certain advertising and analytics. Logged-in users can manage account status from Settings > Security using the 3-dot menu next to Account Security to choose either account deactivation or permanent account deletion.

Deactivation makes your account and associated content (including public playlists/stations) unavailable. Permanent deletion is irreversible and removes your account plus associated data (including listening preferences, playlists, and related user data records). You can also submit a deletion request using the form below.

Request Data Deletion

You have the right to request deletion of your personal data. Submit the form below and we will process your request in accordance with applicable privacy laws (e.g., GDPR, CCPA).

Contact

For privacy-related questions or requests, please contact us through our page.