Cookies

This website

This website sets no analytics, advertising or tracking cookies. It has no advertising pixels, embedded social media or third-party fonts. The only analytics is optional and described below.

Shared songs and playlists. When you open a passcode-protected shared page at moonsong.my/s/… and enter the right code, we set one strictly necessary cookie (ms_share_…) so you don't have to enter the code again on that page. It is limited to our site, can't be read by scripts, contains no personal data and expires after 7 days, or earlier if the owner changes the passcode. Public shared pages without a passcode set no cookies.

The website is delivered by Cloudflare. If Cloudflare's security protection ever needs to challenge a visitor to block automated abuse, Cloudflare may set a strictly necessary security cookie to complete that check. We do not use it for anything else.

The Status page asks our own service for its current state when you open it. That request doesn't use cookies.

Optional analytics

Optional analytics, only if you allow it. When you first visit, a bar asks whether we may count how the website is used. If you choose Allow, the website uses Apphelm, product analytics made and run by Sansavision (Sansa Group AB, the company behind Moonsong) on Cloudflare, to record which pages you open, the page title, the link that brought you here (the referring address and any utm campaign tags), roughly where on the page you click and which buttons you press (for example a play button or Get it on Google Play), how fast pages load, and errors in the website's own code. To recognise a returning visitor it keeps one random identifier in your browser's local storage (apphelm.distinctId). It never records what you type, never records your screen, sets no cookies and is not used for advertising or to follow you to other sites. Apphelm does not store your IP address. If you choose No thanks, or your browser sends a Global Privacy Control signal, nothing is loaded or sent. Either way we remember your answer in local storage (moonsong.analytics) so we don't ask again. You can change your mind any time with Analytics settings at the bottom of every page; saying no deletes the identifier.

Analytics data is deleted automatically: page views, clicks and other events are deleted after 12 months; the record of which link or campaign brought you to the site is kept for up to 400 days (about 13 months) so a later visit can be credited to the right source, and is then deleted. The legal basis is your consent (GDPR Article 6(1)(a)), which you can withdraw at any time.

The Moonsong app

When you sign in, the app stores one essential session cookie in the iPhone's secure storage and sends it with requests to our service so you stay signed in. It lasts about 30 days, or until you sign out or delete your account. It is strictly necessary for the service you asked for, so it doesn't need consent. The app contains no advertising or analytics SDKs.

Changes

If we add other optional cookies or analytics, we will update this page first and ask for your consent where the law requires it. Nothing optional is switched on by default.