Legal
Last updated
September 7, 2026
Effective
August 8, 2026
Cookies are small files a website stores on your device. We use them to keep you signed in, remember what’s in your cart, and understand how the site is used. This page explains which ones we set, why, and how to control them.
01
We group cookies into four purposes. Only the first group is required for the site to work.
Essential. Signing in, keeping you signed in, holding your cart and checkout session, and protecting forms from abuse. These can’t be switched off — without them you couldn’t log in or buy anything.
Preferences. Remembering choices you’ve made, like whether the dashboard menu is collapsed or which theme you’re using.
Security. Recognizing repeated malicious requests and blocking them.
Analytics. Understanding which pages and releases get attention, so we know what’s working. We’ve deliberately built this to avoid identifying anyone — see section 04.
We do not use advertising cookies, and we don’t allow third parties to track you across other websites from here.
02
Cookie | Purpose | How long |
|---|---|---|
wordpress_logged_in_*, wordpress_sec_* | Keeps you signed in | Session, or 14 days if you choose “remember me” |
wp-settings-* | Remembers dashboard display preferences | 1 year |
woocommerce_cart_hash, woocommerce_items_in_cart | Remembers what’s in your cart | Session |
wp_woocommerce_session_* | Links your cart and checkout to you | 2 days |
pmpro_visit | Records that you’ve visited a membership page | Session |
wfwaf-authcookie-* | Security — tells our firewall you’re a legitimate signed-in user | Session |
Exact names vary slightly by WordPress version, and some only appear once you sign in or add something to a cart.
03
Stripe sets cookies on our checkout to process payments and detect fraud. This is required for card payments to work at all. See Stripe’s privacy policy for detail.
Cloudflare Turnstile is used on our demo submission form to tell people from bots. It’s designed not to track you across sites.
Bunny.net delivers our images and audio. It may set a cookie to route requests efficiently and does not use it for advertising.
We don’t control these cookies. Blocking them may stop checkout or form submission from working.
04
We built our own analytics rather than using a third-party service, because most of them exist to build advertising profiles.
We don’t set a cookie for analytics. Instead, when you view a release or play a track, we record that it happened alongside a one-way code made from your IP address, your browser, today’s date, and a secret key. That code lets us tell one visitor from another on the same day — enough to know that 40 people played a track rather than one person playing it 40 times.
The code can’t be reversed into your IP address, and it changes every day, so it can’t be used to follow you over time or link what you did today to what you did last week. We don’t sell it, share it, or use it for advertising.
We also filter out obvious bots, because a crawler isn’t a listener.
05
Some preferences are kept in your browser’s local storage rather than as cookies. These never leave your device and are not sent to us:
You can clear these through your browser’s site data settings.
06
Our consent banner lets you accept or decline non-essential cookies. You can change your choice at any time by reopening it from the link in our footer.
Your browser can block or delete cookies for any site. Every major browser offers this in its privacy settings.
Blocking essential cookies will stop you signing in, keeping a cart, or completing a purchase. Blocking preference cookies means the site forgets your settings between visits — nothing more serious than that.
07
We may update this policy as we add or remove tools. When we do, we’ll change the “Last updated” date above.
08
Questions about cookies, or about anything else in how we handle your data?
Email support@echoholics.com and we’ll help.
