Privacy Policy
Box Office Watch is run by TheHatefulN8. This page explains what the site collects, why, who it is shared with, and how to get it removed. It is written to be read, not to be survived.
What we collect
| What | Why |
|---|---|
| Email address | To sign you in, send one-time codes, and — only if you opt in — send the weekly newsletter. |
| Username, display name, avatar choice, current obsession | Your public profile. Anyone can see these. |
| Films you log, ratings, venue, dates | To build your profile and stats. Public. |
| Reviews and comments | Public by default; you can mark a review private, in which case only you can see it. |
| Letterboxd username (optional) | To show your top 4 on your profile. Only if you connect it. |
| Your picks in Predict the Weekend | To score the week and rank the leaderboard. Hidden from everyone until Thursday’s lock, public after it, along with your scores and streaks. |
| Contact form messages | Your name, email and message, so we can reply. Held by Netlify. |
| Newsletter name | The name you type into the newsletter form, so the email can greet you. Held by Resend. |
| Analytics | Google Analytics measures page traffic in aggregate. It is not tied to your account. |
We never ask for your phone number, address or payment details — there is nothing on the site that takes them. Two forms do ask for a name: the contact form and the newsletter signup. Give whatever name you want people to see; nothing checks it against anything.
Who processes it
- Supabase — stores your account, profile and posts, and handles sign-in. Passwords and passkeys are held by Supabase; the site never sees or stores them.
- Netlify — hosts the site and its server functions, and holds anything sent through the contact form.
- Resend — sends the newsletter, if you opted in, and the notification emails described below.
- Google Analytics — aggregate traffic measurement.
- Google / Apple — only if you choose to sign in with them, in which case they tell us your email address and nothing more.
Loading a page also fetches things from other people’s servers: fonts from Google, script libraries from Cloudflare and jsDelivr, and film artwork from TMDB, Letterboxd, Wikipedia, Rotten Tomatoes and Metacritic. Those servers see your IP address and which page asked, the same as any embedded image anywhere on the web. None of them set tracking cookies here, and none of them are told anything about your account.
Your data is not sold, and it is not shared with advertisers.
Cookies and local storage
Your browser stores a sign-in token so you stay logged in, plus a small cache of your handle and initials so the avatar draws instantly. Google Analytics sets its own measurement cookies. There are no advertising or cross-site tracking cookies.
Emails
Transactional emails — sign-in codes, password resets, security notices — always send, because they are how the account works. The weekly newsletter is opt-in: off unless you ask for it, and every issue carries an unsubscribe link. Two others are on by default and can be turned off any time in Settings → Email notifications: alerts when someone likes or comments on your review, and Predict the Weekend deadline reminders and results.
Age
Accounts are for people aged 13 and over. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, contact us and it will be removed.
Your choices
- See it — everything on your account is visible in your profile and Settings.
- Correct it — edit your profile, ratings and reviews at any time.
- Delete it — Settings → Delete account. This is real deletion: your profile, logged films, reviews, comments and Predict the Weekend entries are removed from the database, not flagged as hidden — including likes and comments you left on other people’s reviews. It cannot be undone. Encrypted backups age out on their own cycle.
- Export it — ask and we will send you a copy of your account data.
If you are in the UK, EU or another region with data protection rights, those rights — access, rectification, erasure, portability, objection — apply, and the routes above are how to use them.
Retention
Account data is kept while your account exists. Delete the account and it goes. Newsletter subscriptions are held by Resend until you unsubscribe. Analytics data follows Google's own retention settings.
Changes
If this policy changes in a way that matters, we will say so on the site before it takes effect.
Contact
Questions, requests, or anything that looks wrong: get in touch here.