Privacy policy

extrabutter is a small app that helps friends find films to watch. This page explains, in plain English, what information it uses, where that information goes, and the choices you have. If anything here is unclear, ask us at contact@extrabutterclub.com.

The short version

• We don't have accounts or passwords, and we don't run advertising. If you say yes, we use Google Analytics to count visits; if you say no, we don't.
• What you add (people, favourite films, ratings, filters) is saved in your own browser, not on our servers.
• We only keep your email address if you choose to join the newsletter.
• Film information comes from other services, listed below, so using the app involves those services too.

What we use, and why

Letterboxd usernames and guest names. When you add someone, their Letterboxd username (or a guest's name) is sent to our server with each request so we can read the public diary feed that Letterboxd publishes for that username and work out picks. We don't keep these requests. Only add usernames you're comfortable using: a Letterboxd diary is public, but it's still someone's viewing history.

Favourite films and ratings. The favourites you choose (including for guests), the ratings you give under “Seen it”, films you mark as seen, your region and your filters are sent with each request so the picks reflect them. We don't keep them.

Your email address (“Email me my top picks”). If you use this, we send your address, along with the usernames, favourites and filters needed to build the email, to our email provider so it can be delivered. We don't keep your address afterwards unless you also tick the newsletter box.

The newsletter (optional). If you tick the box, we ask you to confirm by clicking a link in an email. Once confirmed we store your email address, when you asked and confirmed, where you signed up, and the exact wording you agreed to, so we can show you consented. We use your address only to send the newsletter. Every email has an unsubscribe link, and unsubscribing deletes your address from our list. You can also write to us to be removed. Our legal basis is your consent, which you can withdraw at any time.

Keeping the service safe. To stop abuse, our server briefly remembers, in memory only, how many emails have been requested from an IP address and (as a one-way hash, not the address itself) for an email address. These are forgotten within an hour. Our hosting provider may also keep standard server logs, such as IP addresses and the pages requested, for security and reliability.

What's saved in your browser

extrabutter saves your choices in your browser's local storage so they're still there next time: the people you added, their favourites, the ratings and “seen” marks you gave, your region, filters and sound setting, and the films in your checkout bag. This stays on your device. You can remove it at any time by clearing this site's data in your browser, or by tearing up a ticket to remove that person.

Analytics (only if you agree)

We use Google Analytics to count visits and see which pages are used, so we know what to improve. The first time you visit, we ask whether that's OK, and you can change your answer at any time with the “Analytics” link at the bottom of the page. If you say no, no analytics cookies are set and no analytics cookie identifiers are stored. If you say yes, Google sets cookies in your browser and receives details such as your approximate location, device and browser, and the pages you view. We switch off Google's advertising features, and we don't send it your Letterboxd username, favourites, ratings or email address. We leave a person's username out of page addresses we report. Google may handle this data in the United States.

Other services involved

Using the app means some information passes through these services, each under its own privacy policy:

• Letterboxd: our server reads public diary feeds. Letterboxd sees our server's address, not yours.
• TMDB (The Movie Database): our server asks TMDB for film details, posters and recommendations. Poster images load straight from TMDB's image servers in your browser, so TMDB can see your IP address and browser details when they do. Where you can stream a film is provided by JustWatch through TMDB.
• YouTube (Google): a film's trailer thumbnail loads from Google's servers when you open that film, and the trailer itself loads from YouTube's privacy-enhanced domain only when you press play. Google can see your IP address when that happens.
• Google Analytics: counts visits, only if you agree (see above).
• Our email provider: delivers the picks email and newsletter, and so handles your email address.
• Our hosting provider: runs the website and may process request data such as your IP address.

Some of these companies are based outside your country, including in the United States, so your information may be handled there.

Your rights

Depending on where you live, you may have the right to ask what we hold about you, to have it corrected or deleted, to object to or restrict how it's used, to take it elsewhere, to withdraw consent, and to complain to your data protection authority. Because we keep so little (in practice just newsletter addresses), the main thing to do is email us at contact@extrabutterclub.com and we'll deal with it. We don't sell personal information, and we don't use it to make automated decisions about you.

Children

extrabutter isn't aimed at children under 13 (or under 16 where the law sets a higher age), and we don't knowingly collect their information. If you think a child has given us their email address, tell us and we'll delete it.

Changes

If we change how we use information, we'll update this page and its date. If a change is significant, we'll make that clear on the site.

Contact

Questions or requests about your information: contact@extrabutterclub.com.