Privacy

The short version

• You don't need an account. Your history is tied to a cookie in your browser until you choose to sign in.
• We keep what you import and what you do on the site, to show it back to you. Nothing is sold or used for advertising, and there's no tracking or analytics.
• If you don't sign in and don't come back for 30 days, everything is deleted automatically. You can delete it yourself any time from Delete your data.

What we keep

• What you import. From your file we keep each film or series's title, year, watch date, rating and Letterboxd link, plus your Letterboxd watchlist. The uploaded file itself is read and discarded; it isn't stored.
• What you do here. Titles you mark as seen or not interested, the ones you've recently looked at, and how you've chosen to order suggestions.
• If you sign in with Google or Apple, the account id they give us and your email address (with Apple, this can be a private relay address). We use them only to sign you in. We never see your password.
• If you turn on sharing, your public page shows the people you've seen most, to anyone with the link, until you turn it off.

Some things are shared across everyone and aren't about you: film and TV information from TMDB, IMDb's ratings of films and series, and which film a Letterboxd link points to, so that the next person's import matches faster.

Cookies

• cc_session: a random code that connects your browser to your history. It's needed for the site to work, and lasts up to 400 days.
• cc_more_order: remembers how you like suggestions ordered, if you change it.
• While you sign in, Google or Apple sign-in sets a short-lived cookie, deleted once you're signed in.

There are no advertising or analytics cookies.

Server logs

Like most websites, the server logs each request: your IP address, the time, the page asked for (including what you searched for), and your browser's description. The logs are for investigating problems and abuse, only the site's operator can read them, and they're deleted after 14 days. They aren't shared or used to track anyone.

Who else sees anything

• TMDB (The Movie Database): posters and photos load from their servers, so they see your IP address, as any website you load images from does. We look up the titles you import on TMDB, without anything that identifies you.
• Wikidata helps match a few titles TMDB can't settle alone. It's sent only the title and year.
• jsDelivr serves two of the site's code libraries, so it sees your IP address too.
• Google or Apple, only if you sign in with them.
• Google Images, Letterboxd and IMDb, only when you click a link to them.

This site never contacts Letterboxd for you; it only reads the export you upload.

How long we keep it

• Without signing in: until 30 days after your last visit, or until you delete it.
• Signed in: until you delete it.
• Server logs: 14 days.
• To limit uploads and searches, your IP address is also counted in memory for up to an hour.
• Database backups are kept for 14 days, so deleted data is gone from them within 14 days.

Your choices

• Delete your data removes your history, watchlist, ratings and everything else above, straight away.
• Importing again replaces what was imported before from the same place.
• For a copy of what we hold about you, or any other question, email hello@creditscomber.com.