Privacy

Melofin is published by Soulie and plays music from folders you choose. It has no Melofin music server, advertising or analytics. Your music files are never changed.

Melofin uses user data only for the music-player functions described in this policy, in accordance with the Chrome Web Store User Data Policy and its Limited Use requirements. Melofin does not sell user data, use it for advertising or allow the developer to read your music-library data.

Music on your computer

Choosing a folder gives this browser read access to its selected files. Local music and artwork play on your computer; Melofin does not send them to Microsoft, the developer or another server. File references last while the player tab is open. Choose the folder again after restarting the browser.

Music from OneDrive

Adding a OneDrive link opens a OneDrive helper tab. Finding songs sends requests for the chosen folder and its subfolders to Microsoft. Playback requests the selected audio and cover art directly from Microsoft’s content servers.

Opening Details, choosing Read tags again, or starting Read song tags can request small byte ranges from Microsoft media URLs to read embedded titles, artists, albums and track/disc numbers. Local tags are read from the selected files on this computer. Reading tags is optional and does not start playback, download whole songs or change files. Bulk reading has progress and cancellation, and keeps results already saved.

“Allow OneDrive file reads” requests optional access to Microsoft’s microsoftpersonalcontent.com, files.1drv.com and onedrive.com media hosts and their subdomains. This lets Melofin read response range details that Microsoft may hide from ordinary cross-origin requests. It supports song tags and range-based audio such as AIFF and Apple Lossless. It adds no content scripts on those hosts and sends no local files. Declining keeps local music and normal streaming available where supported. You can revoke access in your browser’s extension settings; saved tags are kept.

These requests include the sharing link, folder/file identifiers and temporary access grants needed to retrieve the files. Microsoft also receives normal network information, such as your IP address and browser request headers. Temporary grants are used in memory, not saved in the song list.

Melofin’s listing and range-fetch requests omit cookies. The OneDrive website runs separately in its helper tab and may use its own cookies, account session and services under Microsoft’s policies. Melofin does not ask for your Microsoft password or provide a Microsoft account sign-in service.

Public online music

“Add online music” can request optional access to the HTTPS site you choose. If a playlist links to another media site, “Allow site & retry” names that site before requesting access. Browser host permissions apply to a whole site; you can revoke them in extension settings. Melofin adds no content scripts to these sites.

Discovery requests public pages, playlists, folder listings and bounded format headers for supported WebM files. Choosing Details, Read tags again or Read song tags can also request small byte ranges for embedded song metadata. Explicit front-cover URLs found in listings are requested when artwork is displayed; discovery does not download picture bodies. Public Nextcloud/WebDAV discovery uses read-only PROPFIND requests for folder properties. These listing and header requests omit cookies and reject redirects. Site access is rechecked before each generic metadata range request. Hosts receive normal network information and the requested URL, which may include a sharing token. No local music is sent to these hosts.

Native playback streams from the selected host using the browser’s media networking and buffering rules. This is separate from Melofin’s listing requests. Sites may have their own cookies and privacy policies. Melofin does not provide account sign-in or bypass password/download restrictions.

For public web sources, original file URLs are saved as identifiers, including query parameters needed for access. Some may contain signed grants or expire. They are also included in player backups; keep backups private. Interrupted-scan markers and missing-permission site origins are kept in browser-session storage to offer retry guidance. They contain no music bytes.

What this browser remembers

WavPack decoding uses a bundled reference-library WebAssembly decoder in the audio worker. Decoder code loads only from the installed extension, not from a website. Audio buffers and decoder input remain temporary; this does not create an offline song library.

Folder links and names, file/folder identifiers, song names, saved song tags, tag-check times and file-version fingerprints, local file size/change time, song lists, inclusion choices, queue/history, volume and playback position are stored in this browser profile. Music bytes and renewable OneDrive playback URLs are not stored in that saved song list. Public web URL identifiers are described above. Search terms stay in the player and are not sent to a search service.

Your browser may temporarily buffer audio and images for playback and manage its own network cache. Melofin does not create an offline music download library or sync your collection between devices.

Saved player details and internal recovery copies are encrypted with a key kept in this browser profile, so the player opens automatically. This does not protect against someone or software able to use the whole browser profile. Keep a private player backup before moving installations: losing the profile or its key can make saved details unrecoverable. Downloaded JSON backups are separate and are not encrypted.

Your choices

“Save player backup” creates a JSON file in your browser’s downloads with folder links, song lists and tags, history, queue, volume and saved position. It includes no music, file access, account sessions or temporary playback URLs. Keep the file private: sharing links and public web file URLs can grant access to the music. The backup is not encrypted.

“Restore from backup” reads a backup on this computer and shows a preview before you choose to replace player settings. Playback pauses and local folders must be chosen again. Melofin keeps one pre-restore recovery copy in its own browser storage; “Save pre-restore copy” saves it to a file. No backup is sent to a Melofin server. Downloaded backup files are separate from extension storage: delete unwanted copies using your computer’s normal file controls.

Use local folders without adding a OneDrive link. Pause playback or close the player tab to stop listening. Close the OneDrive helper tabs when finished. “Remove from player” removes the selected folder’s current configuration and song list; it never deletes music files.

Saved tags remain available after restarting, even when a local folder needs choosing again. They represent the last successful check. Choosing a changed local folder or refreshing a cloud song list discards affected tag checks; Read tags again updates an individual song. Removing the last folder referencing a song also removes its saved tags.

For update recovery, earlier migration backups can remain in extension storage after you remove a folder. To erase all Melofin settings, links, history and recovery backups, remove the extension or clear its site/extension data using your browser. This does not delete your music. Reinstalling can lose your saved player data.

Support and policy changes

No automatic error reports are sent. If you choose to contact support, share only what you intend to send. Keep folder sharing links, access codes, signed playback URLs and browser database exports private.

For troubleshooting, see Help & quick start. For support, visit Melofin support.

Microsoft privacy statement · Open-source notices

Policy for the current Melofin development build · 1 November 2026. New providers or data practices require an updated notice and appropriate consent.