Privacy Policy
Box Office Watch is run by TheHatefulN8. This page explains what the site collects, why, who it is shared with, and how to get it removed. It is written to be read, not to be survived.
What we collect
| What | Why |
|---|---|
| Email address | To sign you in, send one-time codes, and — only if you opt in — send the weekly newsletter. |
| Username, display name, avatar choice, current obsession | Your public profile. Anyone can see these. |
| Films you log, ratings, venue, dates | To build your profile and stats. Public. |
| Reviews and comments | Public by default; you can mark a review private, in which case only you can see it. |
| Letterboxd username (optional) | To show your top 4 on your profile. Only if you connect it. |
| Analytics | Google Analytics measures page traffic in aggregate. It is not tied to your account. |
We do not ask for your real name, phone number, address or payment details, and there is nothing on the site that collects them.
Who processes it
- Supabase — stores your account, profile and posts, and handles sign-in. Passwords and passkeys are held by Supabase; the site never sees or stores them.
- Netlify — hosts the site and its server functions.
- Resend — sends the newsletter, if you opted in.
- Google Analytics — aggregate traffic measurement.
- Google / Apple — only if you choose to sign in with them, in which case they tell us your email address and nothing more.
Your data is not sold, and it is not shared with advertisers.
Cookies and local storage
Your browser stores a sign-in token so you stay logged in, plus a small cache of your handle and initials so the avatar draws instantly. Google Analytics sets its own measurement cookies. There are no advertising or cross-site tracking cookies.
Emails
Transactional emails — sign-in codes, password resets, security notices — always send, because they are how the account works. Everything else is opt-in and can be switched off in Settings → Email notifications, or by using the unsubscribe link in any newsletter.
Age
Accounts are for people aged 13 and over. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, contact us and it will be removed.
Your choices
- See it — everything on your account is visible in your profile and Settings.
- Correct it — edit your profile, ratings and reviews at any time.
- Delete it — Settings → Delete account. This is real deletion: your profile, logged films, reviews and comments are removed from the database, not flagged as hidden. It cannot be undone. Encrypted backups age out on their own cycle.
- Export it — ask and we will send you a copy of your account data.
If you are in the UK, EU or another region with data protection rights, those rights — access, rectification, erasure, portability, objection — apply, and the routes above are how to use them.
Retention
Account data is kept while your account exists. Delete the account and it goes. Newsletter subscriptions are held by Resend until you unsubscribe. Analytics data follows Google's own retention settings.
Changes
If this policy changes in a way that matters, we will say so on the site before it takes effect.
Contact
Questions, requests, or anything that looks wrong: get in touch here.