Effective date: October 9, 2026
We collect only what's needed. We never sell your data.
This Privacy Policy explains what data Letterboxd Tracker Bot ("the Bot", "we", "our") collects when you add it to a Discord server or interact with its commands, how that data is used, how long it is kept, and what controls you have over it. We are committed to collecting only the minimum data necessary to operate the Bot's features.
All data is stored in a private SQLite database. Here is exactly what is stored and why:
Purpose: To deliver diary posts, recaps and responses to the correct channels with your chosen settings.
Purpose: To know which Letterboxd accounts to poll and where to post new diary entries.
Purpose: Deduplication, server statistics, streaks, filters, and reliable delivery via retry.
Purpose: The /profile Stats tab (weekly changes) and milestone shout-outs. Daily snapshots are kept for 90 days; after that only the snapshot from the 1st of each month is kept, so long-term milestones keep working. All snapshots for a username are deleted once no server tracks it any more.
Purpose: /serverrecap, the monthly winners pages in /stats, and the Top Watcher role.
Purpose: To respect the choices you make about how the Bot treats your account.
Purpose: Allows server admins to audit configuration changes via /auditlog and, if set, the audit-log channel.
Purpose: Abuse protection and internal analytics to understand feature usage and improve the Bot. This data is not shared externally.
Purpose: To answer bug reports and support requests. One report per category per user every 24 hours.
Purpose: Keeping the Bot healthy, debugging problems, and seeing how the Bot grows over time. Only the developer can see these.
Purpose: Reduces redundant calls to the TMDB API. Film entries are removed after 1 year without use and search results after 30 days. No personal data is involved.
The Bot communicates with the following external services to function. All connections are over HTTPS.
The Bot reads each tracked user's public Letterboxd RSS diary feed to check for new entries, and reads public profile pages for film history, profile counters, watchlists, and lists. For /verify it reads your public profile bio to find the code. It sends only the Letterboxd username and receives publicly available data (film title, rating, like, rewatch flag, review text, watched date). Review text is shown in the diary post; it is only held in the database while a failed post is being retried (up to 7 days). No authentication credentials are sent. The Bot retries failed requests with backoff and respects rate-limit (HTTP 429) responses.
Film titles are sent to the TMDB API to retrieve metadata such as posters, synopsis, cast, director, genres, runtime, and ratings. Results are cached to minimise repeated calls. This product uses the TMDB API but is not endorsed or certified by TMDB.
All standard Discord bot communication is performed through Discord's official API in accordance with Discord's Privacy Policy.
To keep the Bot running smoothly, the developer receives automated alerts for things like servers joining or leaving, users being added or removed, API errors, and rate-limit warnings. These include basic info such as server name and member count. When a tracked username keeps failing, the developer may be asked to check whether it was renamed, deleted or made private. The developer also has a private, login-protected dashboard showing the same operational data. This data is used only for operational health checks and moderation and is never shared with anyone.
Cleanup runs automatically every day. Here is how long each kind of data is kept:
Minutes - Verification Codes
An unused /verify code expires after 15 minutes and is then deleted.
Days - Failed Post Retry Buffer
Diary entries that couldn't be delivered are held for up to 7 days while the bot retries, then automatically deleted.
Days - Posted Entry IDs
Diary entry IDs used for duplicate detection are purged after 14 days, or straight away when the username stops being tracked in that server.
Days - Error Logs & Film Search Cache
Per-user error logs, the Bot's own warning log, and cached film searches are deleted after 30 days.
Days - Settings Audit Log & Daily Profile Snapshots
Settings audit log entries are deleted after 90 days. Daily public profile counters are thinned after 90 days to one snapshot per month (the 1st), which is kept for long-term milestones while any server still tracks the username. These are public numbers only.
Year - Command Usage & Film Cache
Command usage records are deleted after 1 year. Cached TMDB film data is deleted after 1 year without being used (no personal data).
Hours - After Bot Removal
All data tied to a server (tracked usernames, linked members, settings, film stats, streaks, recaps, sharelinks, opt-outs, audit and usage logs, share codes, etc.) is permanently and automatically deleted 48 hours after the Bot is removed from that server. If the Bot is re-added within that window, nothing is lost.
Immediately - When Tracking Stops
When a username is removed with /removeuser, /clearallusers or /opt-out (or the linked member leaves the server), its film stats, streak days, posted entry IDs, retry queue and error flags in that server are deleted right away. If it is added again later, it starts fresh and only the latest entry is posted. When the last server stops tracking a username, its polling state, history import progress and profile snapshots are deleted too. A member who leaves a server also has their sharelink entry there deleted; the message the Bot already posted in the sharelink channel stays.
Kept On Purpose
Server settings, role settings, tracked usernames and their film history are kept while the Bot remains in your server and the username is tracked. A verified account link (and anonymous mode) stays until you run /unverify. An opt-out record stays until you run /opt-in, so you can't be re-added. Past monthly winners stay as history (shown as "Watcher #NNNN" if the person is anonymous). The removal history (server ID and username) is kept for 400 days, only for growth charts. The server join/leave log and bot-wide totals are kept as long-term history.
The following built-in commands give you control over your data. The member commands (/privacy, /opt-out, /opt-in, /verify, /unverify, /anonymous and /report) always work, even if a server restricts other commands.
/privacy
Shows a short summary of what the Bot stores, right inside Discord.
/opt-out
Stops tracking every Letterboxd account linked to you in that server, deletes its stats there, and blocks anyone from adding you again.
/opt-in
Removes your opt-out so you can be tracked again.
/verify
Proves you own a Letterboxd account and locks it to your Discord account, so nobody else can link it.
/unverify
Deletes your verification and turns anonymous mode off.
/anonymous
Verified users can show as "Watcher #NNNN" in global stats and leaderboards. Inside your own server your real name is still shown.
/sharelink edit
Updates the profile links you shared. A moderator can clear them with /sharelink clear.
/report
Contacts the developer directly, including for data deletion requests.
/listusers
Lists all Letterboxd usernames currently being tracked in your server.
/removeuser
Stops tracking a username and deletes its stats, streaks, posted entry IDs and pending posts in your server. /clearallusers does this for everyone.
/setanonymous
Hides your tracked usernames and/or your server name in global statistics. Also available in /settings.
/auditlog
Reviews the recent history of admin setting changes for your server.
A linked member who leaves a server is automatically untracked there, and their sharelink entry is deleted. Discord only tells the Bot about leaves while it is online, so if someone left during downtime, staff can remove them with /removeuser. To delete all data for your server, simply remove the Bot - everything tied to the server is purged within 48 hours. For individual deletion requests (for example your verification or profile snapshots) or any other privacy concern, use /report or contact us via our support server.
The /stats command shows global statistics and leaderboards aggregated across all servers using the Bot: top watchers, top films, top servers and monthly winners. Each Letterboxd account is counted once, even if it is tracked in several servers.
Any usernames or activity shown reflect publicly available Letterboxd data.
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this page periodically. Continued use of the Bot after changes are posted constitutes your acceptance of the revised policy.
For privacy questions, data deletion requests, or any other concern, please reach out via our Discord support server:
Join Support Server →We collect only what's necessary. Add the bot and track your films with confidence.