Privacy Policy
Last updated and effective: 11 October 2026
Melody Generator (melodygenerator.io, “we”) is a free tool that writes MIDI melodies and chords from a text prompt. This page explains what we collect, why, who helps us run the service, and the choices you have.
What we collect
- Your Google account details when you sign in: name, email address, profile picture and your Google account ID. We use them to create your account and keep you signed in.
- What you make: your prompts, the settings used, the takes we generate for you, and your likes and dislikes. We keep them so you can find them in your library, and we use them, including the takes generated for you, to train, evaluate and improve our music models and the service, as set out in sections 5 and 6 of our Terms of Use.
- Technical data: IP address, browser type and request times in our server logs, used for security and to keep the service running.
- Usage data (pages viewed, demos played, buttons used) through the analytics tools below, as described under Cookies.
We don't sell your personal data. We never send your prompts to Google Analytics or Meta, and we never send your email address to Google Analytics. Meta only ever receives a hashed copy of your email address, as described under Meta Pixel below.
Who helps us run the service
- Google Firebase Authentication (Google LLC): Google sign-in.
- PostHog (PostHog Inc.): product analytics, to see how visitors use the site and the app. Data is stored in PostHog’s US region.
- Google Analytics 4 (Google LLC): website analytics, only after you accept cookies.
- Meta Pixel (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.): measures our ads on Facebook and Instagram, only after you accept cookies. When you create an account after accepting cookies, we send Meta a hashed (one-way scrambled) copy of your email address and of our internal user ID with the sign-up event, so Meta can match it to your Meta account and measure our ads. We never send your email in readable form, and nothing is sent if you decline cookies.
- Hosting and delivery: DigitalOcean (our web server and database), Cloudflare (DNS, CDN, security, and R2 storage for audio previews and backups) and Modal (the GPU servers that run the music model and render audio).
- Prompt reading: your prompt text is sent to TypeSafe (a hosted language-model service) that turns it into music settings. Your account details are not sent with it.
Cookies and similar storage
When you first visit, we ask whether you accept analytics and advertising cookies. Until you accept, Google Analytics and the Meta Pixel are not loaded at all, and PostHog runs without cookies or local storage (it forgets you when you leave the page). You can change your choice at any time with , also in the footer of every page.
| Name | Set by | Purpose | When |
|---|---|---|---|
| mg_session | Melody Generator | Keeps you signed in (HttpOnly cookie) | Always, after sign-in (strictly necessary) |
| mg.consent (local storage) | Melody Generator | Remembers your cookie choice | Always (strictly necessary) |
| mg.prefill (session storage) | Melody Generator | Keeps the prompt you picked while you sign in | Only during sign-in (strictly necessary) |
| ph_<project>_posthog | PostHog | Recognises returning visitors for product analytics | Only after you accept |
| _ga, _ga_<id> | Google Analytics | Counts visits and distinguishes visitors | Only after you accept |
| _fbp, _fbc | Meta Pixel | Measures visits that come from our ads | Only after you accept |
Google sets its own cookies on Google's domains while you sign in with Google.
How long we keep data
Your account, prompts and takes stay until you delete them or ask us to delete your account. When an account is deleted we remove it from the live service, and copies in our backups expire on their normal schedule. Takes, prompts and ratings that have already been used to train or evaluate our models, or that are no longer linked to you, may be kept under the licence in our Terms. Server logs are kept for a short period for security and troubleshooting.
Your choices and rights
- Reject or withdraw analytics cookies at any time with Cookie settings.
- Ask for a copy of your data, a correction, or the deletion of your account.
- Depending on where you live (for example the EU, UK or California) you may have further rights, including the right to complain to a data protection authority.
Children
Melody Generator is not meant for children under 13, and we don't knowingly collect their data. If you believe a child under 13 has given us personal data, let us know and we will delete it.
Changes
If we change this policy we'll update the date above, and tell signed-in users about important changes.
See also our Terms.