Privacy Policy

1. Who we are

Courcast operates courcast.com (anime renewal forecasting), lists.courcast.com (list tracking), calendar.courcast.com (seasonal calendar), and auth.courcast.com (the shared sign-in service). All four are run by the same entity and share a single account and database. For UK GDPR purposes, we are the data controller for the personal data described in this policy.

Contact: [email protected]

2. What data we collect

When you create an account we collect your email address, your display name, a URL pointing to your profile avatar, and if you sign in via OAuth, the user ID that AniList or MyAnimeList assigns to you. The display name, avatar URL, and platform ID come from whichever service you connect; if you use a magic link instead, you can set a display name yourself.

We do not store passwords or payment information. We do not hold IP addresses in any persistent or identifiable way beyond the access logs any web server generates, and we purge those after 30 days.

3. How we collect it

All sign-in goes through auth.courcast.com. We get your email address when you request a magic link from any Courcast service. We get your display name, avatar URL, and platform user ID when you grant Courcast access to your AniList or MyAnimeList account via OAuth. We never receive your password for those platforms.

4. Why we process your data

We do not use your data for advertising, marketing, or profiling.

5. Third-party services

Resend and Amazon SES handle outgoing email. When you request a magic link or receive an account notification, we send your email address to Resend, which delivers the message via Amazon SES. That is the only reason your email address goes to them.

AniList and MyAnimeList handle the OAuth flow when you connect one of those accounts. You authorise the connection on their own pages and we receive only the data listed in Section 2. We never see your password. Their own privacy policies cover what happens on their end.

We use third-party providers for hosting, databases, and infrastructure. They store and process data only as required to operate our services and are not permitted to use it for their own purposes. We store account data in the EU West region.

We do not sell your data. No third party receives it for their own marketing purposes.

6. International transfers

We store your data in the EU West region. Some of our third-party services, particularly email delivery, may involve infrastructure outside the UK or EEA. Where that is the case, we ensure those transfers are covered by appropriate safeguards such as UK International Data Transfer Agreements or EU Standard Contractual Clauses.

7. Data retention

We keep your account data while your account is active. If you ask us to delete your account, we will remove your personal data within 30 days, except for anything we are legally required to retain, such as server logs still within their 30-day window.

8. Your rights

Under UK GDPR you can ask us to give you a copy of the data we hold about you, correct anything that is wrong, delete your data, pause processing while a dispute is resolved, hand your data over in a portable format, or stop processing based on legitimate interests.

Email [email protected] to make a request. We will respond within 30 days and may ask you to verify your identity first.

You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

9. Security

We use HTTPS for all data in transit and encrypt data at rest. No service on the internet is completely secure. If there is a breach likely to put your rights and freedoms at risk, we will tell you and notify the ICO as the law requires.

10. Cookies

We set one session cookie, scoped to .courcast.com, which keeps you signed in across all Courcast services. That is the only cookie we set and it is strictly necessary for the platform to work. We do not use cookies for advertising or cross-site tracking. You can clear it in your browser settings at any time; doing so will sign you out of everything simultaneously.

11. Children

Courcast is not aimed at children under 13 and we do not knowingly collect data from them. If you think a child has signed up, contact us and we will delete the account.

12. Changes to this policy

We may update this policy and will notify you by email or by a notice on the platform before changes take effect. The effective date at the top always shows the current version.

13. Contact

Privacy questions and requests: [email protected]