Privacy Policy

What we store

Kurono is a small, self-hosted site. There are no ads, no trackers and no payments. This is everything that is kept on the server for an account:

• Account: your email address, your username, when you registered, and which sign-in methods are linked (password and/or Google).
• Your password is never sent to us. Your browser turns it into a one-way hash that is only used as a key to your own data. We cannot read it or recover it.
• Watch data: watched episodes with their progress and timestamps, watchlist, manga you are reading, streak, weekly goal and playback preferences (subtitles, audio, speed, accent colour).
• Technical data on every sync: your IP address, an approximate device description derived from your browser's user-agent (for example “iPhone · Safari”), the country your connection comes from, and how many times you have synced. We keep the six most recent devices.
• Usage: number of sessions and total watch time.
• If you link MyAnimeList: the access token needed to sync your list.

We do not log the pages you visit or the searches you make.

Why we store it

Watch data exists so your progress follows you between phone and computer. Email and sign-in methods exist so you can get back into your account. IP address, device and country are kept so the administrator can see who is using the site and spot abuse of the accounts. That information is visible only to the site administrator.

Email verification

When you sign up we check that your email domain has a mail server and send a six-digit code to prove the address is yours. The code is stored as a hash, expires after 15 minutes, and is deleted once used. Mail is sent from our own server ([email protected]) — no third-party mail provider is involved.

Who we share it with

Nobody. Your data is not sold, not shared and not used for advertising. The site runs behind Cloudflare, which sees the traffic to reach us, and video streams are fetched from external sources that see the request for the video file.

Cookies and local storage

We use no tracking cookies. Your browser's local storage holds your session and a copy of your settings and watch data, so the site also works while offline.

Your rights

You can view and change your data in your account settings, clear your history there, and ask for your account and everything in it to be deleted. Email [email protected] and it will be removed.

Data retention

Data is kept as long as the account exists. Verification codes disappear within 15 minutes, device records are limited to the last six. If you ask for deletion, everything is removed from the server; backups of the account file are removed with it.