Performance update: A recent hosting change has increased server load. Pages and videos may load slowly or buffer while we work on fixes. Brief interruptions are possible. Updates on Discord

Loading account
Add an email address — without one you can't get back into your account if you lose your password. Add it now

Privacy Policy

Last updated: 11 October 2026

What we store

Kurono is a small, self-hosted site. Optional donations are handled by Ko-fi. The owner may switch on a separate Adsterra banner test while the community advertising votes continue. This is what is kept on the server for an account:

  • Account: your email address, your username, and which sign-in methods are linked (password and/or Google).
  • Password: sign-in sends your password over HTTPS. The server stores a salted scrypt verifier, not a readable password. Session tokens keep you signed in.
  • Watch data: watched episodes with their progress and timestamps, watchlist, manga you are reading, streak, weekly goal and playback preferences (subtitles, audio, speed, accent colour).
  • Technical data on every sync: your IP address, an approximate device description derived from your browser's user-agent (for example “iPhone · Safari”), the country your connection comes from, and how many times you have synced. We keep the six most recent devices.
  • Usage: number of sessions and total watch time.
  • If you link MyAnimeList: the access token needed to sync your list.

We do not log the pages you visit or the searches you make.

Why we store it

Watch data exists so your progress follows you between phone and computer. Email and sign-in methods exist so you can get back into your account. IP address, device and country are kept so the administrator can see who is using the site and spot abuse of the accounts. That information is visible only to the site administrator.

Email verification

When you sign up we check that your email domain has a mail server and send a six-digit code to prove the address is yours. The code is stored as a hash, expires after 15 minutes, and is deleted once used. Mail is sent from our own server ([email protected]) — no third-party mail provider is involved.

Who we share it with

We do not sell your account or watch data. The site runs behind Cloudflare, which sees the traffic to reach us, and video streams are fetched from external sources that see the request for the video file. If you choose to donate, Ko-fi handles the donation. The advertisement preview uses local example images and does not contact an advertisement provider.

Cookies and local storage

A secure session cookie keeps you signed in. Your browser's local storage holds a copy of your settings and watch data, so the site also works while offline.

To plan the site we count anonymous daily totals: page views per page type, screen width, watch time in and out of fullscreen, pauses, and whether an ad blocker is active. These totals have no account, IP address or other identifier attached. To check for an ad blocker, your browser makes one request per visit to Google's ad server (without cookies or referrer), so Google can see your IP address for that request.

The ad trial poll uses a browser cookie lasting up to 90 days and hashed account or browser identities to keep a first vote from being counted again. We store the choice and vote time; the public poll and owner dashboard show totals. The two polls have separate votes. A local storage setting remembers when you close each poll popup. Viewing the ad example page does not run the ad blocker check.

Kurono's cookie settings require your permission before Adsterra banners load. The poll does not provide that permission. Accept all enables advertising, while Necessary only leaves advertising off. Your choice is stored on this device, and earlier banner choices are respected. You can change it through Cookie settings in the footer. If you allow banners, your browser contacts Adsterra and its advertising partners, which can receive your IP address, device information and the page carrying the ad, and may use cookies or similar tracking. See Adsterra's privacy policy and cookie policy. The local advertisement example page does not contact Adsterra.

Your rights

You can view and change your data in your account settings, clear your history there, and ask for your account and everything in it to be deleted. Email [email protected] and it will be removed.

Data retention

Data is kept as long as the account exists. Verification codes disappear within 15 minutes, device records are limited to the last six. If you ask for deletion, everything is removed from the server; backups of the account file are removed with it.