Summary
MiruShin does not operate its own user account system or hosted streaming service. The app primarily stores settings and tokens on your device, then connects to third-party services you choose to use, such as TMDB, AniList, MyAnimeList, Shikimori, and user-installed Sora-compatible modules.
Default MyAnimeList and Shikimori login uses a small Cloudflare Worker at
auth.emp0ry.com to keep shared OAuth app credentials out of the public app binary.
Watch with Friends also uses that Worker for short-lived room pairing.
Data Stored on Your Device
- App settings, theme preferences, language preferences, and player settings
- Metadata cache and image cache
- Local library data and playback progress
- Installed Sora module records and module ordering
- Exported files you explicitly choose to create
- API credentials and session tokens you enter or receive through login, including TMDB, AniList, MyAnimeList, and Shikimori tokens
Sensitive tokens are intended to be stored using platform-secure storage where supported.
Third-Party Services
MiruShin can send requests to third-party services when you enable or use related features. These may include:
- TMDB for metadata and imagery
- AniList for login, profile data, tracking, library sync, reviews, and social features
- MyAnimeList for login, profile data, tracker sync, and export/import workflows
- Shikimori for login, profile data, tracker sync, title data, and metadata enrichment flows
- Cloudflare Workers for default MyAnimeList and Shikimori OAuth authorization/token proxying, and for short-lived Watch with Friends room pairing
- AniSkip for skip-marker data
- Discord for Rich Presence features on supported desktop platforms
- User-installed Sora modules and any services those modules contact
These services operate under their own privacy policies and terms. MiruShin cannot control how third-party services or third-party modules collect, process, or retain data.
OAuth Proxy
For default MyAnimeList and Shikimori login, MiruShin sends OAuth authorization codes
and refresh-token requests through auth.emp0ry.com, a Cloudflare Worker
operated for MiruShin. The Worker forwards those requests to the relevant provider and
returns the provider response to the app.
The Worker is used to avoid shipping shared OAuth app credentials in public releases. It is not an analytics service. Cloudflare may process request metadata as part of providing and securing the Worker service.
Watch with Friends
Watch with Friends uses auth.emp0ry.com only to exchange a temporary room
offer and answer while devices pair. After pairing, playback sync events travel over a
peer-to-peer WebRTC data channel between the devices.
These events can include the selected title/episode descriptor, addon and episode identifiers, playback position, play/pause state, speed, selected server/quality/voiceover identifiers, and host-granted guest permissions. MiruShin does not route video streams through the Worker.
No First-Party Analytics Service
Based on the repository codebase, MiruShin does not include its own hosted analytics backend,
advertising SDK, or first-party telemetry service operated by emp0ry.
User-Installed Modules
MiruShin does not ship with built-in Sora modules. If you install third-party modules, those modules may make their own network requests and may process titles, episode information, stream URLs, or related data needed for their functionality.
You are responsible for reviewing and trusting any module you install.
Account and Content Responsibility
If you connect AniList, MyAnimeList, Shikimori, or provide other credentials, you do so voluntarily. If you use your own content sources or third-party modules, you are responsible for the legality of that use and for any data those sources process.
Data Sharing
MiruShin does not sell your personal data. Data may still be transmitted directly from your device to third-party services when you use features that depend on those services.
Security
No software can guarantee absolute security. You are responsible for securing your device, your exported files, and any credentials you enter into the app.
Changes to This Policy
This Privacy Policy may be updated as MiruShin changes. When the policy is updated in the repository, the updated version becomes the current version.