Back to home

Privacy Policy

Last updated: March 17, 2026

1. Who We Are

Earth Echo is operated by Coded Vision Design. Our Data Protection Officer can be contacted at contact@earthecho.co.uk.

Coded Vision Design, 6 Braiding Crescent, Essex, CM7 3LU, United Kingdom

2. Information We Collect

When you sign in with Google or Facebook, we receive your name, email address, and profile picture from the provider. When you use credential-based sign-in, we store a securely hashed version of your password. We also collect data you voluntarily enter such as carbon tracking entries, challenge participation, and forum posts.

3. How We Use Your Information

  • To authenticate and manage your account
  • To display your environmental impact metrics and progress
  • To power leaderboards, badges, and community features
  • To improve the application and fix issues

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Consent: When you create an account and agree to these terms
  • Contract: To provide the service you signed up for
  • Legitimate interest: To improve and secure the platform

5. Data Sharing

We do not sell your personal data. We share information only with third-party authentication providers (Google, Facebook) as necessary to enable sign-in, and with our database hosting provider to store your data securely.

6. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time (see our Data Deletion page).

7. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate personal data
  • Request erasure of your personal data
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with the ICO (Information Commissioner’s Office)

8. Cookies

We use essential cookies for authentication sessions. For full details, see our Cookie Policy.

9. Security

Passwords are hashed with bcrypt. All connections use HTTPS in production. OAuth tokens are handled server-side and never exposed to the browser.

10. Contact

For privacy-related questions, contact our Data Protection Officer at contact@earthecho.co.uk.