CITT

    Scan results

    Crunchyroll: Anime Streaming

    Android

    Stream over 2,000 anime titles including exclusive originals, simulcast episodes, movies, and music videos with ad-free viewing and offline downloads for premium members.

    CITT SCORE
    75
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Anime fans comfortable with targeted advertising

    What It Means For You

    Viewing habits, device details, and in-app behavior are shared with advertising and analytics companies including Google, Firebase, and Braze to target ads and measure engagement. Purchase activity and account data flow through Segment and Singular for marketing attribution. Ads are served directly within the app via Google AdMob and TrueX.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (14)

    Data Security

    2 total
    1 High
    1 Medium

    Network Security

    2 total
    1 High
    1 Medium

    Code Security

    2 total
    1 High
    1 Medium

    Privacy

    7 total
    1 Critical
    3 High
    2 Medium
    1 Info

    Third-Party Risk

    1 total
    1 Low

    Third-Party Services

    Braze, Segment Analytics, Singular, Datadog RUM, Firebase Analytics, Firebase Crashlytics, Google AdMob, TrueX, Amazon IVA, Google IMA, Google Tink, OkHttp, Retrofit, ExoPlayer, Widevine DRM, Google Cast SDK, Lottie, Glide

    Security Strengths

    • ✓Industry-leading credential encryption using Google Tink with Android Keystore
    • ✓Proper HTTPS enforcement with no cleartext traffic allowed
    • ✓Comprehensive code obfuscation with 783 obfuscated packages
    • ✓Bearer token authentication with proper implementation
    • ✓WebView file access properly disabled across all WebViews
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    ads
    analytics
    tracking
    marketing
    sensitive data
    privacy risk
    third party risk
    gdpr violation
    ccpa violation
    session recording
    biometric data

    Package

    com.crunchyroll.crunchyroid

    Version

    3.95.1 (Build 1000)

    Analysis Date

    Jan 20, 2026

    Classes Analyzed

    27,328

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Acceptable

    Key Findings

    Data Security - 2 findings (1 high, 1 medium)

    Network Security - 2 findings (1 high, 1 medium)

    Code Safety - 0 findings

    Privacy - 7 findings (1 critical, 3 high, 2 medium, 1 info)

    Privacy Concerns

    What Data is Collected

    Crunchyroll collects viewing history, device identifiers, advertising ID, in-app purchase records, and behavioral patterns. Account details, including email address and subscription status, are also stored and processed.

    Third-Party Data Sharing

    Data is shared with multiple third-party companies for advertising, analytics, and marketing purposes:

    • Google (AdMob, Firebase, IMA) - receives device information and behavioral data to serve targeted ads, measure app usage, and support in-stream ad delivery
    • Braze - receives engagement data to power personalized push notifications and in-app messaging
    • Segment - collects activity data and routes it to other marketing and analytics platforms
    • Singular - receives data linking user actions to advertising campaigns for marketing attribution
    • Datadog - receives performance and diagnostic data to monitor app reliability
    • Amazon (IVA) - receives video interaction data for streaming delivery

    Understanding the Scores

    CategoryScore
    Security80/100
    Privacy70/100
    Data Security85/100
    Network Security82/100
    Code Safety82/100
    Data Collection70/100
    Data Sharing75/100
    User Control70/100

    Positive Security Features

    • Content playback uses Widevine, an industry-standard protection system that prevents unauthorized copying of streams
    • The app relies on OkHttp and Retrofit, well-maintained networking libraries with a strong security track record
    • Firebase Crashlytics is integrated to detect and report app crashes, helping developers address stability issues quickly
    • Google Tink, a modern security library backed by Google, handles sensitive data operations within the app

    Areas for Improvement

    • The breadth of behavioral and personal data shared with advertising partners is significant, and the app provides limited options for users who want to reduce that sharing.
    • Network communication practices present conditions where data may travel with less protection than expected under certain network environments.
    • Data handling in parts of the app creates a risk of unauthorized access to information stored on the device.

    About This Analysis

    This scorecard is generated from automated static analysis of the application. Scores and findings reflect the app's security and privacy posture as of the scan date.

    App Details

    FieldValue
    AppCrunchyroll: Anime Streaming
    Packagecom.crunchyroll.crunchyroid
    Version3.95.1 (Build 1000)
    Scan DateJanuary 20, 2026

    Right of Reply

    Developer not yet contacted