Privacy Policy

What data does Lekkerboxd collect?

Lekkerboxd reads your public Letterboxd profile data: your watched films, ratings, liked films, and watchlist. This data is used solely to generate personalized film recommendations.

TMDb behavior depends on distribution channel. In the Chrome Web Store build, TMDb requests use the Lekkerboxd Cloudflare Worker proxy by default unless you provide your own TMDb key. In the GitHub build, your own TMDb key is required and requests go directly to TMDb.

Where is my data stored?

All data is stored locally on your device using Chrome's chrome.storage.local API. Profile data, settings, and cached recommendations are not stored in any Lekkerboxd application database.

What third-party services are contacted?

When generating recommendations, the extension contacts the following services:

• Letterboxd — to scrape your public profile pages
• TMDb (The Movie Database) — to resolve film IDs, fetch metadata, and get recommendation/similar film data
• Reddit — to search film subreddits for human-curated recommendations
• Taste.io — to fetch algorithmically similar films
• JustWatch — only when you click the eye button to view regional streaming availability

JustWatch links use your configured JustWatch region setting. Auto mode opens the US direct film page. Manual country mode first tries a direct page in that region and falls back to regional search when needed.

Letterboxd, Reddit, and Taste.io requests are made directly from your browser. TMDb requests are routed via the Lekkerboxd Cloudflare Worker proxy in Store builds by default, or directly to TMDb when a user key is provided. GitHub builds always use direct TMDb mode with a user-provided key. Services receive only the film title queries required to find recommendations, not your full profile dataset.

When you open a Letterboxd film page, Lekkerboxd may run a lightweight single-seed recommendation query (using that film as the seed) to render the in-page overlay. This uses the same providers (TMDb, Reddit, Taste.io) with reduced request fanout for speed. In this mode, TMDb provides the candidate pool and external providers act as additional relevance signals.

If you use the "Add to Watchlist" button, Lekkerboxd also sends a direct authenticated request to Letterboxd from your browser to add that specific film to your own watchlist. This uses your existing Letterboxd session cookie and CSRF token locally in the extension.

Is my data shared with anyone?

Lekkerboxd does not use analytics, telemetry, or ad tracking. The extension does not submit your full Letterboxd profile to a Lekkerboxd database. Third-party API providers (and the TMDb proxy in default mode) receive only the request data needed to return recommendation results.

In Store-build proxy mode, TMDb requests pass through Cloudflare infrastructure, which may process standard request metadata (such as IP address and user agent) to deliver and secure the service. GitHub builds do not depend on the Lekkerboxd proxy.

If Letterboxd scraping or watchlist endpoints are temporarily unstable, the extension may enter a degraded mode that prefers cached data and fallback actions until normal behavior resumes.

How do I delete my data?

Open the extension popup, click the gear icon to open Settings, and click Clear Cache. This removes all stored profile data, cached recommendations, and settings from your browser. You can also uninstall the extension, which automatically removes all stored data.

Permissions

Lekkerboxd requests the following browser permissions:

• storage — to save your settings and cached data locally
• tabs — to open Letterboxd film pages and extension documentation when needed
• cookies — to read your Letterboxd CSRF token cookie for watchlist actions you trigger
• Host access to letterboxd.com — to read profile pages and perform watchlist actions
• Host access to api.themoviedb.org — to fetch movie metadata and recommendation data
• Host access to lekkerboxd-tmdb-proxy.lekkerboxd.workers.dev — Store build only, to reach the default Lekkerboxd Cloudflare TMDb proxy
• Host access to justwatch.com — to validate and open JustWatch film/search pages when you click the eye button
• Host access to reddit.com — to search Reddit for recommendation signals
• Host access to taste.io — to fetch similar-film signals from Taste.io

Changes to this policy

If this policy is updated, the changes will be included in a new version of the extension. The "last updated" date at the top of this page will reflect any changes.