diff --git a/server/middleware/csp.go b/server/middleware/csp.go
index e9f0795..dfeeebe 100644
--- a/server/middleware/csp.go
+++ b/server/middleware/csp.go
@@ -22,6 +22,7 @@ func SetPrivacyHeaders(h http.Handler) http.Handler {
 		header.Add("X-Frame-Options", "DENY")
 		// use this if need iframe: `X-Frame-Options: SAMEORIGIN`
 		header.Add("X-Content-Type-Options", "nosniff")
+		header.Add("X-Powered-By", "hatsune miku")
 		/*
 			NOTE: The HSTS header is commented out to avoid potential conflicts with reverse proxies,
 						which may already set their own HSTS policies. Generally, it is better for reverse proxies