Privacy Policy

Zenbu doesn’t maintain its own account system — the site runs primarily in your browser and talks directly to the AniList GraphQL API using your own AniList access token.

Zenbu does not collect, log, or transmit your personal data for its own purposes. Our hosting provider may generate standard, aggregate infrastructure logs (e.g. request counts, error rates) for operating the site; these are not tied to your AniList identity by us.

When you sign in, AniList issues an access token directly to your browser via implicit OAuth — it never passes through a Zenbu server. That token is used to make requests to AniList’s API on your behalf (fetching your list, your profile, and submitting list updates). AniList’s own handling of your account data is governed by AniList’s Privacy Policy, not this one.

Zenbu stores a small amount of data locally in your browser:

• AniList access token — kept in localStorage and mirrored to a non-httpOnly cookie (anilist_token) purely so route middleware can check whether you’re signed in. Neither ever leaves your device except in direct calls to AniList’s API.
• Sidebar state— a cookie (sidebar_state) that remembers whether the navigation sidebar is collapsed. Purely cosmetic, no personal data.
• Theme preference— your light/dark/system choice, stored locally so it persists between visits.

See the full Cookie Policy for details. Zenbu does not use advertising or third-party tracking cookies.

The token and cookies above exist solely to operate the Service: authenticating your requests to AniList and remembering your local preferences. We do not build profiles, run analytics on your viewing habits, or sell data — there is no data of yours on our side to sell.

Your AniList token is sent only to AniList’s API. Requests for episode playback are sent to third-party streaming sources, which may independently log standard request data (such as your IP address) under their own privacy practices; Zenbu does not control those services.

You can sign out at any time to clear the local token and cookie. You can revoke Zenbu’s access entirely from your AniList app settings. Clearing your browser’s site data removes everything Zenbu has stored locally, since that’s the only place it exists.

Requests relating to your AniList account — access, deletion, portability, or correction of your account, list, or profile data — should be directed to AniList, the data controller for that information.

• Access / portability— you can inspect what Zenbu stores locally at any time through your browser’s developer tools.
• Deletion— sign out, or clear this site’s data through your browser settings, to remove it immediately and completely.
• Opt-out of sale— Zenbu does not sell or share personal data.

If you believe we’ve failed to honor a right available to you under GDPR, CCPA, or another applicable privacy law, contact us through the Contact page and we will respond.

Zenbu can be accessed from any country. Your requests are sent directly to AniList and to your chosen streaming source, each of which may be hosted in a different country and is subject to its own data transfer practices.

If a vulnerability in the Service is found that could expose your local token or data to a third party (for example, a cross-site scripting issue), we will disclose it and issue a fix as quickly as possible, and note it on this page.

Zenbu is not directed at children under 13 and relies on AniList’s own account eligibility requirements. Adult (NSFW) content visibility is controlled entirely by your AniList account settings, not by Zenbu.

If this policy changes, the “Last updated” date above will be revised. Since there are no accounts to email, please check back periodically.

Questions about this policy, or requests relating to your rights above, can be sent through our Contact page.