Privacy

Who we are

Clusterflick is run as an independent project, and is responsible for the personal data described here. Questions, requests and complaints go to [email protected].

What we hold

Only what an account needs, and only if you make one.

• Your email address, to send you sign-in links. There are no passwords.
• Your lists: the films on your watchlist and Seen list, with when you added each, and the venues you've starred.
• Details of the films on your lists, such as their genres, directors and runtime, taken from TheMovieDB, for the stats on your Seen list.
• Features switched on for your account, if we have given you early access to any, with when each was switched on.
• Account records Firebase keeps itself, such as when the account was created and last signed in to.

A Letterboxd file you import is read in your browser. Only the films you choose to add are saved, and the file itself never leaves your device.

Without an account, we hold nothing about you. The services below see the requests your browser makes, as any website's hosts do.

Why

To give you the lists you asked for, and to keep the site running.

Your account and lists exist because you asked for them, so we hold them to provide that service. Anonymous visit counts and the logs our hosts keep are in our legitimate interest in running the site and seeing which parts of it are used.

We don't sell your data, show you adverts, or send you anything but the sign-in emails you ask for.

Who handles it for us

The services the site runs on, and the ones your browser loads images and maps from.

Google Firebase

Stores your lists, and the film details that go with them, in London (europe-west2). Your account and sign-in emails are handled by Firebase Authentication, which Google may process outside the UK; it covers such transfers under its data processing terms.

Cloudflare

Sits in front of the whole site, so it sees the IP address and browser details of every request, as any web host does. It also runs the small service that searches TheMovieDB for you (below).

GitHub Pages

Hosts the site's files, and sees requests that Cloudflare passes on to it.

Umami

Counts page visits and a few anonymous events, such as which filters get used. It sets no cookies and is not linked to your account.

CARTO

Serves the map tiles on pages with a map, so your browser fetches them from CARTO directly.

TheMovieDB

Serves the film posters and images, so your browser fetches them from TheMovieDB directly. When you search for a film that isn't showing, or import from Letterboxd, the titles and years you're looking for are also sent to TheMovieDB through our search service. Your email address and lists are not.

Everything else is a link: venues' booking pages, trailers on YouTube, and films on Letterboxd, IMDb and the rest load nothing until you follow them. Once you do, that site's own privacy policy applies.

On your device

No cookies for tracking or advertising. What the site keeps in your browser, it keeps so the site works.

Sign-in

While you're signed in, Firebase keeps your session in your browser's storage, and we keep a clusterflick-signed-in flag so pages know to load your lists. Neither is set unless you sign in.

Sign-in link

Your email address is kept in clusterflick-sign-in-email between asking for a sign-in link and opening it, so the link can be checked. It is deleted when the link is used and ignored after an hour.

Layout

The height your watchlist and directors rows on the home page last had, so the page doesn't jump while they load.

This tab only

Your filters, the place you picked venues near, and where you'd scrolled to, kept in session storage so Back returns you to where you were. Your location, if you share it, stays here too: it is used in your browser and never sent to us.

How long we keep it

Until you delete your account.

Deleting your account from Personalise deletes your lists, the film details that go with them, any features switched on for you, and the account itself, straight away. Removing a single film from a list removes it from that list. Metadata about the film (duration, director, etc.) remains until the account is deleted. The hosts above keep their own request logs for as long as their own terms say.

Your rights

It's your data, and most of what you can ask for you can do yourself.

• See it and take it with you: everything is on Personalise, and Manage lists exports each list as a file Letterboxd can import.
• Correct it: add and remove films and venues there.
• Delete it: Manage account, then Delete account.

For anything else, such as a copy of what Firebase holds about your account, or an objection to how we use it, email [email protected]. If you're unhappy with our answer, you can complain to the Information Commissioner's Office.

Changes

If what we hold or who handles it changes, this page changes first.

Last updated 11 November 2026.