Privacy notice
Updated 27 September 2026
Who operates Courcast
Courcast is part of Swift Works, an independently operated UK project. This notice covers courcast.com, Lists, Calendar, the shared Auth service and Courcast's Discord features. Swift Works is a project/trading name, not a statement that a separate company is registered.
Analytics is on by default, with an opt-out. Reading this notice, closing the analytics notice or creating an account is not recorded as consent. Use Privacy settings at the bottom of any app to turn analytics off or on.
What we use and why
| Purpose | Information | Basis |
|---|---|---|
| Accounts and sign-in | Email, display name, avatar, linked provider IDs, OAuth tokens, session IP address and user agent. | Contract: provide and secure the account you request. |
| Lists, calendar and alerts | Imported watchlists, ratings, progress, list names and contents, follows, alert preferences, provider usernames and Discord account/server/channel IDs. | Contract: provide the features you request. Public provider data may also be fetched when someone enters a username. |
| Supporter membership | Patreon user/member IDs, membership status, entitlement amount and Courcast access tier. We do not receive card details. | Contract: apply supporter benefits and your linked membership. |
| Security, reliability and recovery | Request and error metadata, IP addresses, user agents, account/session identifiers, support records and database backup copies. | Legitimate interests: prevent misuse, diagnose faults, maintain service availability and recover data. |
| Audience measurement with an opt-out | Broad page category, browser language and screen size, plus a derived session identifier, approximate location and browser/device details. The server processes your IP address but Umami does not store the raw IP address in its analytics records. | Legitimate interests: understand how Courcast is used and improve the service. Analytics is on by default. You can object and turn it off in Privacy settings. |
| Privacy requests and complaints | Your contact details, the request, identity checks where needed and the response record. | Legal obligation: handle applicable data protection rights and complaints. |
You provide information when signing in, connecting a service, importing a library, creating content or contacting us. AniList, MyAnimeList, Discord and Patreon provide information for the connections you request. Calendar and list imports can also retrieve public library details using a supplied provider username. We do not receive your provider password and do not sell personal information or use it for behavioural advertising.
Some information is needed to fulfil a feature, such as an email for a sign-in link or a provider username for a calendar. You can browse public pages without creating an account. There are no solely automated decisions about you with legal or similarly significant effects; anime forecasts concern titles, not people.
Public lists and Discord
Publishing or sharing a list can expose its name, content, ranking and associated profile information to other people. Anyone with access may copy or share it, and public pages may be indexed. Discord interactions and alerts can be visible to people with access to the relevant server or channel. Check the destination before sharing and avoid putting private information in list names or messages.
Who receives information
- Our hosting providers process application data and backups. Network and security providers help deliver and protect the service.
- Resend processes sign-in email recipients and message content for delivery, using its delivery infrastructure and subprocessors.
- AniList, MyAnimeList, Discord and Patreon receive the requests needed for the integrations you use. They also operate their own services under their own privacy notices.
- Swift Works operates self-hosted Umami for audience measurement.
- Sentry can receive diagnostic events where enabled. Operational logs and error reports can contain request or account metadata.
- Image and content providers may receive network requests when your browser loads their content. People who view your public lists receive the information you publish.
Access is also needed by the operator to maintain the service and handle requests. Information may be disclosed where legally required.
Locations and international transfers
Our hosting, email, network, diagnostic and connected-platform suppliers may process information in the UK, EEA and other countries, including the United States. A hosting region does not determine every place where a supplier or its support staff can process data. The supplier and transfer register is being verified; we are not claiming that a particular transfer agreement or adequacy mechanism has been confirmed for every recipient. You can request the current information through the contact below.
How long information stays
Account information, connections, saved lists, follows and preferences are retained to provide your account and requested features, until removed or an applicable deletion request is fulfilled. Session and verification credentials have expiry times; expiry does not itself prove the underlying database row has been erased.
Operational records and diagnostics are retained to investigate faults and misuse. A uniform 30-day purge has not been established. Full database backups can include account and list information and currently have no enforced automatic expiry. Deleting an active account does not immediately erase those copies. We are reviewing retention and deletion across these systems and will explain any remaining copies or justified exceptions when handling your request.
Existing analytics records are also subject to a retention review; a fixed automatic deletion period has not yet been verified. Opting out stops new browser analytics events. It does not automatically erase earlier server records. Contact us about access or deletion of information that can be linked to you.
Cookies, browser storage and analytics choices
Authentication and security storage supports sign-in you request. The privacy-choice cookie remembers whether analytics is on or off; it is not a record of consent. Display storage remembers the options you select; resetting it restores defaults without deleting your account. These are separate from audience measurement.
| Storage | Purpose | Duration |
|---|---|---|
| Sign-in and OAuth cookies | Keep you signed in and validate sign-in/linking requests. The shared session token is scoped to courcast.com and its subdomains; other authentication cookies may be host-only. | Session tokens normally expire after 7 days, with renewal during use. Short-lived OAuth state and verification storage expires separately. |
| courcast_privacy_v1 | Remember your analytics choice across Courcast, Lists, Calendar and Auth. | 180 days from your choice, or until you clear it. |
| courcast_title_language; courcast_include_non_japanese_v2 | Remember the title language and catalogue origin options you select. | Cookies: 1 year. Matching local storage remains until reset or cleared. |
| courcast:title-language; courcast.includeNonJapanese.v2; courcast.includeAdult; courcast.originToggleHintSeen; theme | Remember requested display/content choices and dismissal of the catalogue hint. These values are local to the main app. | Local storage: until you reset it in Privacy settings or clear browser storage. |
| cal_status_border; cal_watched_indicator; cal_behind_badge; cal_show_current; cal_show_planning; cal_show_completed; cal_show_dropped | Remember calendar display and list-status options you select. | 1 year, or until you reset Calendar preferences or clear cookies. |
We use self-hosted Umami. Analytics loads by default unless you have opted out or your browser sends Do Not Track or Global Privacy Control. Courcast sends broad page categories instead of usernames, list identifiers, full paths, queries, fragments or referring page addresses. Umami derives a session identifier and approximate location using network and browser information, and stores session-linked page events. Authentication, account, management and legal pages are excluded from measurement. Read Umami's privacy FAQ for more about its design.
The first-visit notice includes an Opt out button. Closing it leaves analytics on unless a browser privacy signal blocks it. Existing opt-outs remain off. Use Privacy settings on any app to turn analytics off or on for this browser, including while signed out. The preference lasts 180 days and does not sync to other browsers. Display settings can be reset on each app, and your browser can clear cookies and local storage; clearing sign-in cookies signs you out.
Your rights and complaints
Depending on the processing and applicable law, you can request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting processing before withdrawal. Rights have conditions and exceptions.
We normally respond to rights requests within one calendar month. Where the law permits extra time, identity checks or a pause for clarification, we will explain what is needed and the applicable timing. Send only the information needed to identify your account and request; do not send passwords or sign-in links.
You can raise a concern with us and complain to the Information Commissioner's Office, or another relevant data protection authority. You do not need a Courcast account to read this notice or change browser privacy choices.
Children and changes
Anime services may be used by younger people. We do not currently verify every visitor's age. If you are concerned about a child's information, contact us. Our assessment of children's access and safeguards is ongoing.
We update this notice as the service or its processing changes, show the revision date above and bring material changes to your attention as appropriate.
Contact and report a concern
Privacy questions, rights requests and concerns: [email protected].
This dedicated contact address is being set up. Until it is active, please do not send personal information to it. We will update this notice when the contact route is available.