Privacy

• Your account: username, email address, a display name and bio if you set them, and your password, hashed with scrypt and a per-account salt and never stored in a form anyone can read.
• Your diary: every viewing you log. Film, date, rating, review text, and whether you marked it a rewatch, a spoiler, or private.
• Your lists: watchlist, favourites, custom and shared lists, and the manual ordering you drag things into.
• Your connections: friendships, pending friend requests, blocks, and comments you write.
• A profile photo, if you upload one.
• Sessions: a random token per signed-in device, stored hashed, expiring after 90 days.

• No IP address logs, page-view history, or behavioural profile.
• No third-party analytics or advertising code. There is none in the page.
• No payment details, because nothing here costs money.

Rate limiting holds a counter against your IP address in server memory for a few minutes at a time to stop abuse. It is never written to the database and does not survive a restart.

Your profile visibility is yours to set: public, friends only, or private. Individual diary entries can be marked private, which excludes them from your public library, the feed, film pages, and any file you export to another service. You can also hide your diary or watchlist from your profile independently, and turn comments off entirely.

Blocking someone makes you mutually invisible: neither of you appears in the other's search results, profile pages, or comment threads.

• TMDB supplies all film metadata and poster images. Posters are served from our own servers rather than loaded from theirs, so TMDB never sees your browser or your IP address. Searches you type are sent to TMDB to look up films, without any identifier tying them to your account.
• Our email provider receives your address when we send a verification or password-reset link.
• Our hosting and database providers hold the data on our behalf.

Settings has a one-click export of everything you've logged, as JSON, plus CSVs shaped for Letterboxd's importer. It is free, has no gate on it, and always will. There is no paywall code in this project to switch on later.

The same page deletes your account. Deletion is immediate and permanent: your diary, ratings, reviews, watchlist, comments, friendships, and photo are removed from the database, not flagged as hidden. Lists you own that other people are also on are handed over to another member rather than deleted out from under them. Take an export first if you want one, because we cannot recover anything afterwards.

Until you delete them. Expired sessions and used email links are swept automatically. Deleting your account removes everything at once.

Questions, or a request about your data: support@tenpoint.site.