Privacy

Reelist is a small, personal film diary. This is what it keeps about you and who else sees any of it.

What Reelist stores

• Your email address and a password, to sign you in.
• Your diary: the films you log, when you watched them, your ratings, likes, notes and tags, plus your watchlist and favourites. Only you can see these in Reelist.
• Connections you set up (Plex, the Siri Shortcuts, AI assistants, Alexa). Each is a key that lets that service add to your diary, and an AI assistant read it too (see below). Reelist keeps only a scrambled copy of each key, with when it was last used, and you can remove any of them from your Sources page. If you connect Plex, Reelist also keeps the last few things Plex told it (films started, stopped or finished) to show you on the Plex page, and the films you stopped part way through.
• The Siri ticket Shortcut reads your AMC ticket on your phone and sends Reelist only the text on it, to log the showing. The screenshot itself stays on your phone.

Who else sees it

• Other people see nothing of your diary unless you choose to share it from your Account page, in one of two ways. A share link shows the films, dates and ratings in your diary (and, only if you tick the box, the film you're playing in Plex right now), never your notes. A public profile, at an address with a handle you pick, shows the same films, dates and ratings and your notes too, as reviews, to anyone. Neither shows your tags, likes, watchlist or email. Turn either off and it stops working at once. Search engines and AI assistants are asked not to list a public profile unless you also tick “Let search engines and AI assistants find it”.
• If you join a local scene, your films count towards that city's totals, which other signed-in members can see: how many people logged a film and their average rating, and only once at least five people have. Never who, and never a single watch. Leave the scene and you stop counting.
• Every account has a member number, given in the order people joined. It appears on your Account page and, if you make your profile public, on that profile.
• Film details and posters come from TMDB. When you search, Reelist's server passes the words you search for on to TMDB.
• Reelist runs on Vercel, and your account and diary are kept in a Supabase database that the person who runs this Reelist manages. Password-reset emails are sent through Resend, which sees your email address to deliver them.
• Reelist uses PostHog to see which features get used and to find bugs: what you click, linked to your account, and screen recordings of visits with everything you type hidden. You can turn the recordings off under Privacy on your Account page.
• Reelist never sells your information or shows you adverts.

AI assistants

If you connect Claude, ChatGPT or another AI app to Reelist, it can read your diary, including your notes, your watchlist and your stats, whenever you ask it something about them. It can also log films, rate them and add to your watchlist, but it can't delete diary entries. What it reads goes to the company that runs that assistant and is handled under their privacy policy. Each connected app is listed under Sources, AI assistants, with when it was last used; disconnect it there and it stops at once.

Alexa

If you link the Reel List skill, Amazon sends Reelist the words of what you say to the skill (as text, never a recording) along with the key that links it to your diary. Reelist uses them to find the film, asks you to confirm it, and saves the diary entry. It doesn't keep what you said. Amazon handles your voice under its own privacy notice. Unlink the skill from your Sources page, or disable it in the Alexa app, and it stops at once.

Taking your diary with you

Download your diary from your Account page whenever you like: it saves everything you've logged, with your notes, tags and likes, plus your watchlist and favourites, as files you can keep or import elsewhere, Letterboxd included. The file is put together in your browser from your own diary and goes only to you.

How long it's kept

Your diary and everything else above stay until you remove them or delete your account. A connection's key stays until you remove it. The Plex activity list keeps only its latest 30 events, and PostHog keeps screen recordings for 30 days.

Leaving, and questions

To delete your account and everything in it, or with any question about your data, email chrisntr@gmail.com and it will be dealt with.