How we handle information

Effective 7 September 2026. This Privacy Policy describes how eccoses (“we,” “us,” or “our”) collects, uses, and shares information in connection with https://eccoses.com and the related GearSound / Eccoses application (the “Service”). eccoses is operated in connection with Bonus Meditation / Basicform and the GearSound / Eccoses project.

1. Scope

This Policy applies to the static site, the in-browser sequencer, optional account features, WebXR / headset walk-in, and related marketing pages. It does not apply to third-party sites we merely link to.

2. Information we collect

Account and authentication

If you register or sign in, we may collect an email address, an optional display name, and a password (stored in hashed form by the authentication service). If a third-party sign-in (for example, X) is enabled, we receive the identifiers that provider returns. Session cookies or equivalent credentials keep you signed in.

Content you create

Arrangements, scenes, exported files, and other User Content you make or upload in the Service may be processed to operate the product, to save your work where accounts exist, and — as described in the Terms — for marketing, demonstration, education, and promotional purposes.

Local device storage

The Service uses browser local storage, IndexedDB, and similar technologies to remember preferences (for example, a landing-page look variant, editor settings, and time-on-site used to time a sign-in prompt) and, when autosave is enabled, to keep a local library of your scenes on this device — including a snapshot taken before a sign-in redirect so the arrangement is not lost. These values typically remain on your device unless you clear site data.

Cookies and similar technologies

We may use cookies, local storage, and comparable storage for authentication, preferences, and analytics. You can control cookies through your browser; disabling them may limit sign-in or analytics.

Usage, device, and approximate location

Like most websites, our hosts and analytics may receive IP address, browser type, referring URL, pages viewed, timestamps, and coarse location derived from IP. The application pages may load Google Analytics (measurement id G-Q0R7L2RJKH as configured in the app).

VR / headset usage

If you enter WebXR (“Enter VR” / walk-in), the experience runs in your browser or headset browser. We do not intentionally collect biometric identifiers, eye-tracking data, or raw headset sensor streams. We may infer that an XR session was started (for example, via ordinary usage analytics or a feature flag). Spatial tracking needed to render the scene is processed on your device by the browser and headset runtime. Do not use the Service in XR if you do not want the headset platform’s own privacy terms to apply — Meta Quest and other headset vendors process data under their policies, which we do not control.

Communications

If you email us, we keep the contents of that correspondence as needed to respond and to maintain records of notices (including copyright and privacy requests).

3. How we use information

To provide, maintain, and improve the Service, including accounts, scenes, and XR walk-in.
To communicate about beta access, security, and material changes to these terms.
To understand aggregate use and to debug failures.
To display or use User Content for marketing, demonstration, education, and promotion, as stated in the Terms.
To enforce the Terms, including suspected copyright infringement, and to protect the Service and other users.
To comply with law and to respond to lawful requests.

4. Sharing

We do not sell your personal information. We may share information with service providers who host the site, run authentication, or provide analytics, under instructions to process data for us; with professional advisers; if we are involved in a reorganization of the project; or when we believe disclosure is required by law or necessary to protect rights, safety, or the Service. Headset platforms, font/CDN providers, and analytics vendors receive what their services necessarily process when you load those resources.

5. Children’s privacy (COPPA-aware)

The marketing site speaks to parents, teachers, and adult makers. The Service is not directed to children under 13 as a primary audience, and we do not knowingly collect personal information from children under 13 without verifiable parental consent.

If you are a parent or guardian: you must provide consent before a child under 13 creates an account or provides personal information. Educational use by a school or teacher should proceed only under that institution’s policies and, where required, with parental notice and consent. If you believe we have collected personal information from a child under 13 without proper consent, contact [email protected] and we will take steps to delete it. We do not condition a child’s participation on providing more personal information than is reasonably necessary to use the Service. We do not sell children’s personal information.

Users between 13 and the age of majority in their jurisdiction should use the Service only with a parent or guardian’s permission.

6. Retention

We retain account data while the account is active and for a reasonable period afterward as needed for security, backups, and legal obligations. Local storage remains until you clear it. Correspondence about notices may be kept as a record of the request.

7. Your choices

You may decline to create an account and still use much of the local editor (subject to the Terms). You may request access to or deletion of account data by writing to the notice address below. You may clear local storage and cookies in your browser. Analytics may be limited by browser controls or industry opt-outs where available.

8. Security and international processing

We use reasonable administrative and technical measures, but no method of transmission or storage is perfectly secure. The Service may be hosted and accessed from more than one country. By using it, you understand that information may be processed outside your home jurisdiction.

9. Changes

We may update this Policy. The “Effective” date above will change when we do. Material changes may also be noted on the Service. Continued use after an update constitutes acceptance of the revised Policy where permitted by law.

10. Contact for privacy and notices

Privacy questions, parental requests, and data notices: [email protected] (placeholder). Operator: eccoses, in connection with Bonus Meditation / Basicform and the GearSound / Eccoses project. Website: https://eccoses.com.

This Policy is provided for transparency and is not legal advice. It has not been certified as attorney-reviewed for every jurisdiction in which the Service may be used. We may update it. The Terms of Use govern your contract with us, including marketing use of User Content and intellectual-property terms. If this Policy conflicts with a separately signed written agreement, that agreement controls to the extent of the conflict.