Privacy Policy

Effective 6 October 2026

1. Who we are

SeaNama ("we", "us") is an independent project based in Canada. We make the SeaNama app and the SeaNama instance software, and we run this website. For anything about your personal information, write to [email protected].

2. What this policy covers

This policy covers seanama.com, the SeaNama apps (Windows, Android, Android TV, macOS, Linux and web), the instance software, our account service at accounts.seanama.com, our update service at get.seanama.com, and any instance we run ourselves.

It does not cover instances run by other people, or the addons, debrid services and other third-party services you use with SeaNama. Each of those has its own rules.

3. The website

• Server logs. When you visit seanama.com, our server records your IP address, the date and time, the page asked for, the response, its size and how long it took. If an invite code ends up in the address, it is masked before anything is written down. We use these logs to keep the site running and secure, and delete them after 14 days.
• Cloudflare. The site is delivered through Cloudflare, which protects it from attacks and serves it quickly. Cloudflare processes your IP address and request details to do that, under its own privacy policy.
• Visit counts. We use Cloudflare Web Analytics, which uses no cookies and does not fingerprint you. It gives us totals such as page views, referring sites, countries and device types, never a profile of you.
• The invite box. An invite you paste is checked inside your browser. It is never sent to us; the page simply opens the address the invite names.

4. Cookies and storage

seanama.com sets no cookies of its own. Cloudflare may set a strictly necessary security cookie (such as __cf_bm) to tell people from bots. Your language choice is kept in your browser's local storage (seanama.landing.lang) and never sent to us. Because there are no advertising, tracking or analytics cookies, there is nothing to consent to and no cookie banner.

Instances and the app use one strictly necessary cookie to keep the web app signed in to its instance, and keep your profiles, settings, library and watch progress on your device so the app works. Sign-in tokens are kept in your system's secure storage where the platform has one. You can remove all of this by signing out, clearing the site's data, or uninstalling the app.

5. The app

The SeaNama app has no analytics, no ads and no crash reporting. It sends nothing to us unless you sign in with a SeaNama account. What it stores, it stores on your device, on the instance you joined, or with your account. To work, it connects to:

• The instance you joined: for addons, sync of your library and progress, watch together and app updates.
• Our account service (accounts.seanama.com), only if you sign in with a SeaNama account: to sign you in and keep your profiles and library. See section 7.
• Addons and their image hosts: chosen by you or your host, to show catalogues and artwork and to find sources.
• Your debrid service: when you play something, the video comes from it directly, so it sees your IP address.
• AniSkip: for anime, the app sends the show's ID, the episode number and its length to find when the intro starts and ends.
• Only if you choose to use them: Stremio (to bring your library over; your Stremio password goes only to Stremio, and is not stored), and Discord (on desktop, the app can show what you're watching through the Discord app on your computer; you can turn this off in Settings → Controls and privacy).
• Links you open, such as trailers on YouTube or pages on IMDb and Kitsu, open in your browser under those sites' own rules.

6. Instances

An instance is a server run by its operator, usually someone you know. The operator decides who joins and is responsible for the information the instance holds. Depending on its settings, an instance keeps:

• your name, role, and the name, type and last-used time of each device you link;
• your synced library, watch progress, watchlist, profiles and settings;
• a playback log of what was played, when, on which device and from which source, unless the operator switches it off (the app tells you when it is on);
• daily counts of requests per member, and a record of admin actions.

Watch-together rooms and their chat are kept only in memory and disappear when the room ends or the server restarts. When friends on different instances watch together, room messages pass between those instances.

If you were invited to someone else's instance, ask its operator about your information; we have no access to it. If you were invited to an instance we run, write to [email protected].

Instances check get.seanama.com for updates. That service logs the instance's IP address and version for 14 days.

7. SeaNama accounts

A SeaNama account lets you sign in to any instance whose operator allows SeaNama accounts, and brings your profiles and library with you. We run the account service at accounts.seanama.com. For each account it keeps:

• your email address and the name you give;
• your profiles (their names, pictures and settings such as an age limit; a profile's PIN stays on the device that set it) and, for each profile, its library: your watchlist, what you watched and where you stopped;
• for each device you sign in on, its name and type, and when it signed in and was last used;
• the instances you joined with it, and which of them keep your library for you;
• a record of sign-ins, new devices and account deletions, without IP addresses;
• if you connect Trakt or MyAnimeList to a profile: the access that service gave SeaNama and your username there.

Trakt and MyAnimeList. You can connect either to a profile. You sign in on that service's own page and approve SeaNama there; your password for it never reaches us. The account service then uses the access it was given only to read that profile's list on the service and to update it with what you watch or add in SeaNama, which means the service learns those titles and episodes. Disconnecting, deleting the profile or deleting your account removes the access at once (and we tell Trakt it is no longer valid); you can also take it back on the service itself.

Signing in. An account has no password. Each time you sign in we email you a six-digit code. We keep the code only as a keyed hash, together with your email address and the IP address that asked for it, so that we can limit how many codes are sent. A code works for 15 minutes. The emails come from our own mail server, on our servers in the European Union, and no email provider handles them. Its log records the address each email went to and whether it was delivered.

What an instance gets. When you join an instance with your account, it learns your name and email address and keeps its own record of you as a member, under its operator (section 6). While you use it, it keeps your library in step with your account. It never receives anything that would let it sign in as you anywhere else. At accounts.seanama.com you can see the instances you joined and take their access back at any time.

Accounts kept by an instance. Some operators keep accounts on their own instance instead of using ours. Those accounts belong to that instance and its operator, not to us.

Deleting your account. Sign in at accounts.seanama.com and choose Delete my account. Your account, profiles, library and devices, and the access you gave instances, are deleted at once. Instances you joined keep their own member record until their operator removes it.

The standalone mode is not available yet. Before it launches, we will update this policy to say what it keeps.

8. Why we use information

We use the little we have to run the website and our services, sign you in and keep your library in step across your devices, keep them secure, fix problems, answer you when you write, and meet legal obligations. Where the GDPR or similar laws apply, our legal bases are our legitimate interest in running a secure service, providing what you asked for, and complying with the law.

9. Who we share with

We don't sell, rent or trade personal information. We use these service providers, who handle it only to provide their service to us:

• Cloudflare: website delivery, security and visit counts, and forwarding the email you send to our addresses.
• Hetzner: the servers our services run on, in the European Union.

When you join an instance with a SeaNama account, that instance receives your name and email address, and keeps your library while you use it (section 7).

If you connect Trakt or MyAnimeList, they receive the titles and episodes SeaNama adds to your list there, under their own privacy policies.

We disclose information to authorities only when the law requires it, and we'll tell you when we're allowed to.

10. Where it's stored

We're based in Canada, our servers are in the European Union, and Cloudflare operates worldwide. Your information may therefore be processed outside your country. Where that happens, we rely on the protections these providers offer, such as the European Commission's standard contractual clauses.

11. How long we keep it

• Server logs for seanama.com, accounts.seanama.com and get.seanama.com: 14 days.
• Your SeaNama account, profiles and library: until you delete them. Deleting the account removes them at once.
• Sign-in codes (the emailed ones, with the email and IP address they were sent for, and the ones a TV shows): deleted within a day after they stop working.
• A device you signed out of, or an instance whose access you took back: 30 days.
• A Trakt or MyAnimeList connection: until you disconnect it, or delete the profile or the account.
• The record of sign-ins, new devices and account deletions: 180 days.
• Our mail server's log of sign-in emails: about five weeks.
• Visit counts: kept by Cloudflare as totals only.
• Emails you send us: as long as needed to deal with them, and no longer than two years unless the law asks for more.
• Instances keep what they hold until the operator or you remove it.

12. Your rights

You can ask us to show you the personal information we hold about you, correct it, or delete it, and you can withdraw any consent you gave. If the GDPR or UK GDPR applies to you, you can also ask us to restrict or stop using it and to give you a copy in a portable form. Write to [email protected]; we'll answer within 30 days. We may need to confirm it's really you first.

If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to the data protection authority where you live.

13. Children

SeaNama isn't meant to be used by children under 13 on their own, and we don't knowingly collect information from them. Kids' profiles are set up and managed by an adult in the household. If you believe a child has sent us personal information, contact us and we'll delete it.

14. Security

Everything travels over HTTPS. Addon addresses and debrid keys stay on the server and never reach a device; sign-in tokens, sign-in codes and invite codes are stored only as hashes. A SeaNama account has no password to steal: every sign-in is confirmed with a code sent to your email address. No system is perfectly secure, but we work to protect what we hold and will tell affected people promptly if something goes wrong.

15. Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll also say so on seanama.com before they take effect.

16. Contact

Questions or requests about privacy: [email protected].