What we handle,
and what we never touch.

The short version

To build your stats, the Extension sends the developer's own server a list of the films you've watched (as Letterboxd film identifiers) and your own star rating for each — and nothing else. It does not send your name, your Letterboxd username, your email, or your login.

Your IP address is never stored or logged; it is used only for a few seconds, in the server's memory, to stop abuse. The server computes your stats and returns them; it stores nothing and keeps no logs that could identify you. There are no analytics, trackers, ads, or third-party data sales.

{
  "films": [
    { "slug": "parasite-2019", "rating": 4.5 },
    { "slug": "the-godfather", "rating": 5 },
    { "slug": "in-bruges", "rating": null }
  ]
}

What the Extension does, step by step

1. Reads your watched-films pages on letterboxd.com, using the Letterboxd session you're already logged into, in your own browser — the same pages you can see yourself.
2. Sends the compute server an anonymous list of the films found (Letterboxd film slugs, e.g. parasite-2019) together with your own rating for each (0.5 to 5, or "unrated"). This is the only information transmitted, and it carries nothing that identifies you.
3. The server matches those films to cast & crew data (sourced from The Movie Database) and returns only the finished stats for display.
4. The Extension renders the stats on the page. Cast and crew thumbnail images load from TMDB's image servers into the page, the same way any web image does.

External scores, specifically

This tool is worth spelling out, because it is the one part of the Extension that talks to the server as a side effect of ordinary browsing rather than something you explicitly open.

What is sent

• The identifier of the film whose page you are viewing — its TMDB id and/or its Letterboxd slug — plus which of the three sources you have enabled.

What is not sent

• Your username, your session, your ratings, your watch history, or anything about other pages you have visited. The request contains no identifier for you of any kind, so the server cannot build a profile or link two lookups to the same person.

What the server can nonetheless infer

That some visitor, at some moment, opened that film's page. We state this plainly rather than describing the feature as "anonymous" and leaving it there.

How often, and your control

• Results are cached in your browser for about a day, so revisiting a film page normally sends nothing at all.
• Three independent switches — IMDb, Rotten Tomatoes, Metacritic — in the Extension's options. Turning all three off stops the lookups entirely: the code returns before a request is ever built.

What is sent off your device — and what is not

Sent to the compute server, only when you open Stats

• The list of films you've watched, as Letterboxd film identifiers.
• Your own star rating for each of those films.

Sent to the compute server, only while External scores is enabled

• The identifier of the film you are currently viewing, and which score sources you have enabled — once per film page you open that isn't already cached.

Never sent anywhere

• Your name, email, or Letterboxd username. The username is used only locally, in your browser, to know whose films to read — it is not transmitted.
• Your Letterboxd password, cookies, or login session.
• Your watch dates. A year view reads your diary in your browser; the server is never told which year you are looking at, or when you watched anything.
• Your IP address — never logged or stored. See below.
• Any browsing history or activity on other sites.
• Any analytics, telemetry, advertising, or tracking identifiers.

How the server handles your data

The compute server is operated by the developer and is stateless: it computes your stats from the list you send and returns them without storing the list, the result, or any log tied to you. The server is hosted in Germany (EU).

The Extension also keeps a small separate database of public film facts — cast and crew from TMDB, and each film's public Letterboxd community rating. This is information about films, not about you: it is shared by all users and contains nothing personal.

What is stored on your device

Using your browser's local extension storage, and staying on your device:

• Your on/off preference for the Extension and for each individual tool.
• Your Letterboxd username, auto-detected or entered, used locally to know whose films to read.
• A short-lived cache of your last computed stats, so re-opening is instant.
• A cache of external scores for films you've viewed, about a day, so revisits are instant and fewer lookups are made.

You can clear all of it at any time by removing the Extension or clearing its data in your browser's extension settings.

Third parties

• The Movie Database (TMDB) — the source of the cast and crew data and the person thumbnail images. This product uses the TMDB API but is not endorsed or certified by TMDB.
• OMDb API — the source of the IMDb, Rotten Tomatoes and Metacritic scores. It is contacted only by the developer's server, never by your browser, and it is sent only a film identifier — never anything about you. Your browser makes no connection to IMDb, Rotten Tomatoes or Metacritic, so those sites receive nothing from you through this Extension.
• No analytics, advertising, or data-broker services are used. Your watched-film list is never sold or shared with anyone; it is used solely to compute your stats and is not retained.

Permissions

• storage — to save your on/off settings, your username, and the local caches on your device.
• Access to letterboxd.com — so the Extension can run on Letterboxd, read your watched-films pages using your existing session, and display the Stats view.
• Access to the compute server's address — so the Extension can send the anonymous film list and receive the computed stats, and look up external scores for the film page you're viewing.

The Extension requests no other permissions and runs on no other websites.

Changes to this policy

If this policy changes, the updated version will be posted at this same address with a new "Last updated" date.

Contact

Questions about this policy are welcome.