Privacy

What this site and this binary do with your data. It is a short page on purpose.

The binary

Ecko does not phone home. It has no telemetry, no analytics, no licence check and no update ping. It makes exactly the network requests your program asks it to make. Nothing about your code, your machine or your usage reaches us, because nothing is sent.

When your program calls ai against a real provider, that request goes to the provider you configured, directly. Without a key it runs in mock mode and makes no network request at all.

This website

This site uses Plausible, on every page. Its script loads from plausible.io without asking, because it sets no cookies and stores nothing in your browser. It counts page views, the referring site, and your country, browser and device type, without recognising you from one visit to the next. A content blocker will usually block it, and nothing here depends on it.

This site can also use Google Analytics, if you accept it. It does not load until you choose Accept analytics. Until then, and if you choose Reject analytics, no script is fetched from googletagmanager.com and no analytics cookie is set. The choice is stored in this browser as localStorage on ecko.sh, not as a cookie. To change it later, clear this site's data for ecko.sh and reload.

If you accept, gtag.js records the page you viewed, roughly where in the world you are, and which site or search sent you. It sets cookies to recognise a return visit. We use it to see which pages are read and which are not. It is Google's product, not ours, and Google's privacy policy governs what they do with it.

A content blocker, or a browser with tracking protection on, will still block googletagmanager.com even after an accept. Nothing here depends on it.

There is nothing else. No advertising, no embedded widgets, no webfonts fetched from anyone else. The typefaces and downloads are served from ecko.sh. Besides ecko.sh, the only origins this site loads anything from are the two named above.

If you email us

We keep the email so we can reply and honour any agreement it leads to. We do not sell it, and we do not add you to a mailing list you did not ask for.

Who processes data for us

Resend delivers our email. Cloudflare serves this site and the release downloads. Plausible counts page views, and Google does too if you accept analytics. That is the whole list. None of them receive anything about the programs you write, because the binary sends nothing.

How long we keep it

Support email is kept as long as it is useful for answering you. Ask us to delete your personal data and it goes from our primary storage within 30 days and from backups within 90. Invoices and tax records from past licence purchases are kept for up to seven years, because the law requires it.

Your rights

You can ask for a copy of what we hold, have it corrected, have it deleted, or object to how we use it. Write to support@ecko.sh and we will answer within 30 days. If you are in the EU or UK, that address is also the data protection point of contact.

We do not sell your data, and we do not use it to train AI models.

Contact

Ecko is published by Machine Republic (Pty) Ltd. Support and privacy questions go to support@ecko.sh, and security reports to security@ecko.sh.