Privacy Policy
Last updated: November 10, 2026
Merry Melody ("we", "us") makes personalized, AI-generated Christmas songs. This policy explains what information we collect, why, who helps us process it, how long we keep it, and how you can delete it. We collect only what we need to make and deliver your song.
What we collect
- Account details — your email address, and when you signed up and last signed in. We use your email to send one-time sign-in codes and to keep your songs and orders together.
- Song details you enter — the recipient's first name, your name (optional), the memories and details you share, and your style choices. We use these only to write and produce your song.
- Your songs — lyrics, audio, and AI-generated cover and card artwork, so your song page and downloads keep working.
- Photos you upload (if a feature asks for one) — stored privately and used only for your song or card.
- Purchases — what you bought, the amount, any tax, and the order status. We never receive or store your card number; Stripe handles payment details.
- Technical and usage data — pages visited and steps completed (for example "lyrics written" or "link copied"), collected by us and by Google Analytics (see "Analytics and cookies"), plus your IP address and browser type. We store IP addresses and browser details only as one-way salted hashes, used to prevent abuse, enforce free-song limits, and keep the service secure.
How we use it
- To sign you in, create your lyrics, song, and artwork, and deliver them to you.
- To process payments and refunds and keep accounting records.
- To show your song page to anyone you share the link with.
- To prevent fraud and abuse (for example, automated sign-ups) and to enforce fair-use limits.
- To understand which parts of the site work and improve them.
We do not sell your personal information, and we do not use the details you share about your loved ones for advertising.
Who helps us
We share information only with service providers that help us run Merry Melody, and only what each one needs:
- AI music and image generation providers — receive the lyrics, style, and description needed to compose your song and illustrate your artwork.
- Stripe — processes payments, taxes, and refunds.
- Email delivery — sends your sign-in codes and receipts.
- Cloudflare Turnstile — checks that sign-ups come from real people.
- Google (Google Tag Manager and Google Analytics) — measures how visitors use the site, as described below.
- Hosting and database providers — run our website and store data securely.
We may also disclose information if required by law or to protect our users and service from fraud or abuse.
Analytics and cookies
We use Google Tag Manager to load Google Analytics, which uses cookies to measure how people use Merry Melody: pages viewed, steps completed (for example "lyrics written" or "purchase completed", with the order amount), and general device, browser, and approximate location information. This helps us understand which pages work and fix what doesn't. We never send Google your email address, the names you enter, your memories, or your lyrics.
We also use two of our own cookies that are needed for the site to work: one keeps you signed in, and one tells the page that you're signed in. Cloudflare Turnstile may set a cookie to tell real people from bots.
You can opt out of Google Analytics on every site with Google's Google Analytics opt-out browser add-on, or block or delete cookies in your browser settings (you'll need our sign-in cookie to stay signed in). Learn more about how Google uses data at policies.google.com/technologies/partner-sites.
Your song page
Each song has a private link. It isn't listed on our site or in search engines, but anyone who has the link can listen to the song (or its preview) and read the lyrics. Share it only with people you want to hear it.
How long we keep things
- Song audio and artwork files are cached on our servers for about 72 hours after they're last used, then removed and re-created from our providers automatically the next time someone plays them.
- Songs and lyrics are kept while your account exists so your links keep working.
- Uploaded photos are kept until you delete them or delete your account.
- Order records are kept as long as required for tax and accounting purposes, even after account deletion.
- Sign-in codes expire after 10 minutes; sign-in sessions expire after 30 days of inactivity.
Deleting your account
You can delete your account anytime from your Account page. This permanently deletes your account, your sign-in sessions, and your uploaded photos, and anonymises your songs: the recipient's name, your name, and the details you shared are removed. Order records are kept for accounting. To have a specific song taken down completely, email us its link.
Your rights
Depending on where you live (for example, California under the CCPA/CPRA), you may have the right to know what personal information we hold, to get a copy, to correct it, and to delete it. Email support@merrychristmas1.com and we'll respond within the time the law requires. We won't treat you differently for exercising these rights.
Children
Merry Melody is for adults (18+). We don't knowingly collect information from children under 13. Parents may create songs for their kids; please share only a first name and details you're comfortable including.
Security
We use encrypted connections (HTTPS), store sign-in codes and sessions only in hashed form, and limit access to personal data. No system is perfectly secure, but we work to protect your information.
Changes
If we change this policy, we'll update the date at the top. Significant changes will be highlighted on this page.
Contact
Privacy questions or requests: support@merrychristmas1.com.