Privacy Policy
How Melodessa uses information to create and deliver your song gifts.
Information you provide
We use your email for account sign-in and delivery. Song projects include the names, occasion, story, lyrics and style you submit. You may also choose to add a photo and a gift message. Only submit information and materials you are entitled to use.
How the service works
Cloudflare hosts the application, account records and private media. Confirmed lyrics and song instructions are sent to our music generation provider. Stripe processes payments; Melodessa does not store your card number. Resend sends sign-in and delivery emails.
Cookies and local storage
An HttpOnly session cookie keeps you signed in. Local browser storage holds drafts and request-recovery identifiers. A short-lived sign-in marker can restore an unfinished draft after Google sign-in in the same tab. Your IP address and, when enabled, Turnstile help limit abuse of free previews. Local storage is not a permanent device identity.
First-party service statistics
We record limited creation stages, language, a predefined occasion category and a broad source category to understand the song-gift journey. A random identifier in the current tab is used for up to 30 minutes; the server stores a one-way daily hash, not the original identifier. These statistics do not contain your story, lyrics, email, IP address, full referring URL or private access links. Internal attribution may be linked to a project or purchase, and payment and email-delivery totals come from the service records. Detailed statistics become eligible for bounded daily cleanup after 35 days when collection runs. Do Not Track and Global Privacy Control signals exclude this activity from the behavior report. Excluding statistics does not change financial or delivery records.
Optional Google Analytics
If you allow analytics, Google Analytics 4 helps us measure visits to our public information pages. Google receives a random cookie identifier, browser and device information, a public page address without its query or fragment, and only the origin of an external referring site. Google processes technical request data, including your IP address. We do not send your story, lyrics, email, account, order or gift-access links to Google Analytics. Creation, library, admin and gift pages are excluded. Advertising features and automatic form, link and history tracking are disabled. Your choice is stored in this browser for up to 180 days. You can change it or withdraw consent through Analytics preferences in the public-page footer; withdrawal stops future collection and removes our Google Analytics cookies, but does not erase data already sent. Do Not Track and Global Privacy Control also exclude Google Analytics. Essential sign-in and draft storage continue to work.
Optional Google sign-in
When Google sign-in is available and you choose it, Google provides an account identifier, email address and basic profile information such as your name and profile picture. We use this information to sign you into your song account and connect an existing verified account when appropriate. The requested Google permissions cover identity, email and basic profile information. Email sign-in remains available.
Sharing and retention
A gift link exposes the selected recording, message and optional photo to anyone who has the link. Your project story, email and payment details are not included. You can revoke the gift link. New paid projects have a 24-month cloud storage period; older guest orders keep their original terms.
Your information
For questions about your information or requests to access, correct or delete it, contact hello@melodessa.com. Please do not send card details, sign-in links or private access tokens in your message.