Crunchyroll is an anime streaming app owned by Sony, operated within Sony Pictures Entertainment's Pictures segment and reporting over 21 million paid subscribers as of March 2026 per Sony Group Corporation's SEC Form 20-F. Crunchyroll's own privacy-policy link redirects to Sony Pictures Entertainment's corporate Privacy Policy, which discloses broad categories of collected Personal Information (identifiers, commercial info, internet/browsing activity, geolocation, and more), states SPE does not sell Personal Information for money but does share it with third parties including advertising partners for targeted ads and analytics, and uses cookies/tracking technologies placed by service providers and advertising partners. Apple's App Store privacy label for the Crunchyroll app confirms Location, Identifiers, and Usage Data are used to track users across apps and websites owned by other companies, and that identity-linked data is used for Third-Party Advertising. In September 2023, Crunchyroll (sued as Sony Pictures Entertainment, Inc. d/b/a Crunchyroll) reached a class-action settlement of Video Privacy Protection Act claims alleging it disclosed subscribers' personally identifiable viewing information to third parties without consent, denying wrongdoing while agreeing to a settlement fund paying claimants an estimated $30 each.
TRACK RECORD
1 BREACH
[2026-03-12] · BREACH
Have I Been Pwned lists a breach record for Crunchyroll: "Crunchyroll".
Approximately 1,195,684 accounts affected, per HIBP.
Crunchyroll's website privacy-policy link (crunchyroll.com/privacy) redirects to Sony Pictures Entertainment's (SPE) corporate Privacy Policy, which discloses that SPE generally collects categories including Identifiers (name, email, IP address), Personal records, Commercial information, Internet/electronic network activity information, Geolocation data, Audio/visual information, and Inferences.
Sony Group Corporation's Form 20-F for the fiscal year ended March 31, 2026 (filed with the SEC, CIK 0000313838) describes Crunchyroll as a digital-network streaming service focused on anime content, operated within Sony Pictures Entertainment's Pictures segment, and separately states Crunchyroll surpassed 21 million paid subscribers as of the end of March 2026.
SPE's privacy policy states that SPE does not sell Personal Information in exchange for money, but does share Personal Information with third parties in compliance with the law to deliver targeted ads and other tailored communications to consumers, and for certain analytics services.
In Beltran et al. v. Sony Pictures Entertainment, Inc. d/b/a Crunchyroll (N.D. Ill. Case No. 1:22-cv-04858), the court-authorized settlement website states the class action accused Crunchyroll of disclosing subscribers' personally identifiable information to third parties without consent in violation of the Video Privacy Protection Act, covering registered users who viewed videos on a Crunchyroll website, app, or video-on-demand service between September 8, 2020 and September 20, 2023, with Class Counsel estimating a pro rata payment of approximately $30 per claimant; Crunchyroll denied violating any law but agreed to the settlement.
Have I Been Pwned's breach catalog lists the "Crunchyroll" incident (crunchyroll.com), breach date 2026-03-12, affecting approximately 1,195,684 accounts. Data classes exposed per HIBP: Email addresses. Source: Have I Been Pwned (haveibeenpwned.com), CC BY 4.0.
The Crunchyroll iOS app's Apple App Store privacy label (fetched live) discloses that Location, Identifiers, and Usage Data may be used to track the user across apps and websites owned by other companies.
SPE's privacy policy (governing Crunchyroll via the redirected privacy-policy link) states that cookies and other tracking technologies are placed on its services by both its own service providers and third parties such as advertising partners, who can collect and use information about users' interactions with the service.