music privacy policy

What we collect

There are no accounts, logins or input forms, and no visitor statistics (Google Analytics). The only cookies are the functional ones described under "Browser storage" below. If we ever start using visitor statistics, we will update this policy first.

Browser storage

Likes, your library and your own playlists, recently played albums and playlists (up to 8), the last track you played with its position, and the play queue (including shuffle and repeat) stay only in this browser's storage (localStorage). They are not sent to the server and disappear when you clear site data in your browser.

One functional cookie (nova.prefs.v2, one year) remembers your display settings: theme, lyrics text size, home cover size, background mood and motion. It is used only to draw the screen the way you chose from the first load and holds nothing that tells visitors apart. If you open a page in another language or switch languages, a cookie remembering that language (NEXT_LOCALE) stays until you close the browser.

Page speed and visit counts (Cloudflare Web Analytics)

We use Cloudflare Web Analytics to see whether the site loads well and which pages are slow. When a page opens, your browser sends Cloudflare, Inc. (United States): the page address (path), the address of the page you came from (referrer), the browser, operating system and device type, and performance figures such as how long the page took to load. The country is estimated from your IP address, and Cloudflare states that it does not store the IP address. This counts as a transfer of personal information abroad.

Not used: cookies, browser storage (such as localStorage), identifiers that tell visitors apart, or device fingerprinting. The operator sees only aggregate numbers that cannot identify anyone (visits per page, visits per country, load speed) and uses them only to improve the service and look into outages. Retention follows Cloudflare's policy.

How to refuse: your browser's tracking protection or an ad or tracker blocker may stop it from being sent. Blocking it makes no difference to using the site.

Server access logs

To keep the service running safely, the server automatically records each request (IP address, requested address, time and response result). These records are used only to look into outages and attacks, and are deleted automatically after 14 days.

Delivery through Cloudflare

Every request to this site passes through the network of Cloudflare, Inc. (United States), which we entrust with delivering it. Your IP address and request details are processed at the moment of relay, only to deliver the site and block attacks. This counts as a transfer of personal information abroad.

How we keep it safe

Only the operator can access personal information, every connection is encrypted (HTTPS), and secrets such as passwords are stored encrypted. Personal information is deleted automatically once its retention period ends.

Your rights

You can ask at any time to see, correct or delete your personal information, or to stop its processing. Send the request to the privacy officer's email and we will reply within 10 days after checking it. A legal guardian of a child under 14 can make the same requests.

Privacy officer

The privacy officer is the music operator, reachable at mail@hyunsu.co.kr.

Where to get help

If you need advice or a remedy for a privacy violation, you can also contact the following Korean agencies.

• 개인정보분쟁조정위원회 (Personal Information Dispute Mediation Committee, Korea) 1833-6972 (www.kopico.go.kr)
• 개인정보침해신고센터 (Personal Information Infringement Report Center, Korea) 118 (privacy.kisa.or.kr)
• 대검찰청 (Supreme Prosecutors' Office, Korea) 1301 (www.spo.go.kr)
• 경찰청 (Korean National Police Agency) 182 (ecrm.police.go.kr)

Changes to this policy

When this policy changes, we update this page and its effective date. Changes that collect more information are posted here 7 days before they apply.