Anime fans have a certain level of faith in Crunchyroll. After providing their email address and setting up their payment information, they settle in and watch shows that feel intimate in the same way that niche obsessions always do, sometimes for hours at a time. Because of this closeness, the platform has amassed a sizable user base and is the destination for a very particular community to watch content that they truly adore. This is why, depending on your point of view, the accusations in a recent class action lawsuit seem either unsurprising or like a subtle betrayal.
The lawsuit, which was filed on March 5, 2026, in a federal court in California, alleges that Crunchyroll violated the Video Privacy Protection Act, a federal statute that is likely unfamiliar to the majority of Americans but has unexpectedly harsh penalties. Francisco Cabonios, the lead plaintiff, and four other parties, including a minor, claim that Crunchyroll has been surreptitiously sending user data to Braze Inc., a third-party marketing and analytics firm, without getting the kind of consent that the VPPA actually demands. Consent is not buried in the terms of service. written, distinct, and explicit consent. the type that truly helps the user comprehend what they’re consenting to.
Crunchyroll, LLC — Key Case Information
| Company | Crunchyroll, LLC — anime streaming platform, owned by Sony Pictures Entertainment |
|---|---|
| Founded | 2006, San Francisco, California |
| Case name | Cabonios et al. v. Crunchyroll, LLC — 2:26-cv-02373 |
| Filed | March 5, 2026 — U.S. District Court, Central District of California |
| Lead plaintiff | Francisco Cabonios and four others (including a minor) |
| Alleged violation | Video Privacy Protection Act (VPPA) — unauthorized disclosure of user viewing data |
| Third party implicated | Braze Inc. — marketing and analytics company |
| Data allegedly shared | Email addresses, device IDs, and specific video titles watched |
| Alleged start of violation | At least 2022 (per complaint) |
| Damages sought | $2,500 per violation + attorney fees and costs |
| Prior history | Crunchyroll previously settled a similar VPPA lawsuit in 2023 |
| Crunchyroll response | No public comment issued as of filing date |
| Official reference | Top Class Actions — Crunchyroll Lawsuit Report |
It wasn’t ambiguous behavioral patterns that Braze was supposedly receiving. Email addresses, persistent device identifiers, and the precise titles of videos that users viewed were among the data transmitted, according to the complaint. Not “streaming content” in the general sense.
The shows’ real names. When paired with an email address and a device ID, it is sufficient to identify a particular individual and piece together exactly what they have been watching, episode by episode. According to the lawsuit, Crunchyroll integrated Braze’s software development kit directly into its mobile app, which was a purposeful technical decision rather than an inadvertent configuration. This data pipeline is said to have been operating since at least 2022.
The VPPA is a law with a peculiar history. After a Washington newspaper revealed Supreme Court nominee Robert Bork’s video rental history during his confirmation hearings, Congress passed it in 1988. The concept was straightforward: businesses that know what you watch shouldn’t be allowed to share that information without your consent because what you choose to watch is private.
Four decades later, streaming apps and SDKs integrated into smartphones are subject to the same principle, and courts have generally been willing to extend it there. Similar allegations have been made against several streaming services in recent years, including Samsung, which was sued under the same statute for its smart TV viewing data.
History is what adds to the complexity of the Crunchyroll situation. In 2023, the business resolved a lawsuit involving remarkably similar VPPA allegations. The plaintiffs in this new case make direct reference to that settlement, claiming that if the accusations are true, Crunchyroll’s ongoing actions are “particularly egregious” because the company has already experienced this.
Crunchyroll may have made a sincere attempt to improve its data practices after resolving the earlier case. Maybe it didn’t. The latter is suggested by the complaint. Although it’s not unusual at this point in the litigation, Crunchyroll hasn’t made any public comments regarding the claims or the previous settlement in connection with this new filing, which also doesn’t exactly project confidence.
Observing this specific segment of the streaming market gives me the impression that data sharing has become so ingrained in the development of apps that businesses occasionally forget what they have truly allowed their users’ information to be used for. Standard tools include marketing SDKs like Braze’s, which enable platforms to run email campaigns, send push notifications, and track user engagement. Additionally, they are data collectors by design. Even though it seemed normal in a product meeting, plugging one into a consumer app without thoroughly auditing the information that passes through it is the kind of oversight that sounds reckless in court.
In a limited sense, the stakes are real for individual users. The VPPA allows for $2,500 in statutory damages for each infraction. A successful class action could result in a significant amount for a platform with millions of users, but the more likely outcome, as with most consumer privacy class actions, is a settlement that pays users a portion of that amount while the lawyers keep a larger portion. That’s not exactly cynicism. It’s simply the way these cases usually proceed.
The reputational aspect might be more important to Crunchyroll than the legal one. The platform’s owner, Sony, has spent years establishing Crunchyroll as the world’s premier home for anime. The brand is based on the trust of the community and the devotion of a fan base that values its connection to the content.
The kind of story that quickly gains traction in that community is a lawsuit that claims the platform was surreptitiously feeding user data into a marketing company’s systems for the second time. The success of the legal claims is still up in the air. However, the issue of what Crunchyroll was doing with user data and whether consent was requested is not going away.
