Privacy Policy

Nothing you type is stored beyond the date you pick. The following is collected automatically as part of serving the site:

• Request informationIP address, user agent, referring URL
• Visitor cookieA random identifier stored in your browser on first visit (cookie name mvid, expires after one year). It is not linked to your name or any contact detail and is never used for authentication.
• Usage recordsThe date you entered, the recommendation returned for it, and whether you used a share option

We use this information only to run and improve the service — to see which dates are popular and which share options are actually used, to diagnose errors, and to detect abusive or automated traffic. We do not use it to build advertising profiles, and we do not sell it.

Where the EU/UK GDPR applies, our legal basis is legitimate interest (Art. 6(1)(f)) in operating, securing, and understanding the use of a free service. The processing is limited to aggregate analytics and involves no automated decision-making about you.

Request and usage information is written to server logs (Vercel Runtime Logs) only — it is not stored per-visitor in any database. Those logs are retained for up to 30 days under the log retention policy and are then deleted automatically; we do not export or archive them elsewhere.

The visitor cookie expires one year after it is set, and is destroyed immediately if you clear cookies in your browser. Aggregate counters that cannot identify anyone — such as how many times a song has been selected in total — may be kept indefinitely.

We do not share your information with third parties for their own purposes. We do rely on the following service providers, who process data on our instructions. Because the operator is in Korea and these providers are elsewhere, using this site involves an international transfer of the data listed below.

• Vercel Inc. — United StatesHosting, request logging, traffic analytics
  Data transferred: IP address, user agent, referer, visitor cookie ID, the date you entered
• Google LLC — United StatesUsage analytics (Google Analytics), album-cover image generation (Gemini)
  Data transferred: Cookie-based visit and event records, IP address / (image generation) song titles and other service data
• Functional Software, Inc. (Sentry) — United StatesDiagnosing and responding to application errors
  Data transferred: On error only: IP address, browser information, the URL where the error occurred
• Neon Inc. — United StatesStoring chart data and per-song aggregate counters
  Data transferred: No personal information — chart records and per-song selection counts (aggregates not linked to any individual)
• Cloudinary Ltd. — United States / IsraelStoring and serving generated album-cover images
  Data transferred: No personal information — the generated image files
• Kakao Corp. — KoreaKakaoTalk sharing (only when you actively use it)
  Data transferred: Whatever the Kakao SDK collects when invoked, under Kakao’s own policy

We may also disclose information where we are legally required to do so by a competent authority.

We use our own visitor cookie (mvid) and Google Analytics’ analytics cookies. We do not use advertising cookies.

You can refuse or delete cookies in your browser settings at any time; the site works normally without them. To opt out of Google Analytics specifically, you can install the Google Analytics Opt-out Browser Add-on.

You may request access to, correction of, deletion of, or restriction of the information described above, and you may object to processing based on legitimate interest. Write to the address below and we will respond without undue delay.

Because we hold nothing that identifies you, locating a specific record may require you to supply the cookie identifier it was recorded against. Clearing cookies in your browser is enough to ensure that future visits are not linked to earlier ones. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority.

This service is not directed at children under 14, and we do not knowingly collect information from them.

All traffic is encrypted in transit (HTTPS), access to the service providers listed above is limited to the operator, and we deliberately collect as little as the service can run on.

• Controllerthe operator of milsong.my
• Emailmilsong.my@gmail.com

If this policy changes we will publish the updated version on this page with a new effective date, and describe the change where it is significant.

Effective date: September 8, 2026