Effective date: 28 October 2026 | Operator: Romy
1. Website visitors
You can read this website without signing in. The site uses no advertising trackers, analytics scripts, or tracking cookies. The interface uses a system font. Movie Bot branding is served from this domain. Server icons load from Discord’s CDN when a featured server has an icon, which sends your IP address and normal browser request information to Discord.
The web server processes your IP address to deliver pages and limit abusive requests. Routine website access logging is disabled. Error logs can include IP addresses, requested paths, timestamps, and technical errors. They are rotated daily and retained for up to seven rotations. Rate-limiting state is held temporarily in memory.
2. Discord account and bot data
When you use the bot, it stores your Discord user ID and public account name, profile bio, settings, tutorial progress, and server IDs associated with your interactions. It stores the titles you rate or watch; ratings and review text; diary dates and rewatch flags; favorites; watchlists and custom lists; episode progress; follows; accepted friendships, pending friend requests, blocks; and activity references. Server setup, polls, clubs, votes, reminders, import status, and notification-delivery records are stored when you use those features.
Custom profile pictures and banners are optional. Movie Bot validates their actual image format and accepts PNG, JPEG, GIF or WEBP up to 50 MB, preserving original animation. Original images are stored outside the public website, with ownership metadata in the database. Replaced and reset images are removed from active storage; protected backups may retain earlier copies. Your chosen color, favorite shows and genres, and pinned review are also stored. Obsolete profile badge settings and derived images may remain in protected storage, but are not displayed or served.
Movie Bot does not read ordinary server messages. It uses slash commands and does not request privileged Message Content, Server Members, or Presence intents. It does not store your Discord password. Commands run in servers; Movie Bot does not initiate direct messages. Friend requests ping their recipient in the server channel, while privacy and settings replies are ephemeral. Opted-in public episode reminders use an enabled server notification channel; private or friends-only viewing data is not announced there. The website can connect to your Movie Bot account using a single-use code from an ephemeral Discord command; it never asks for a Discord password.
3. Private review drafts and imports
Review submissions, edits, and review text inside diary logs are backed up privately before title lookup. A draft includes the original text, title input, spoiler choice, original command options, creation time, and save receipt. Drafts are owner-only, survive restarts, and are included in your export. They are not published by the website.
If you link Letterboxd, Movie Bot stores your supplied username and synchronization state and reads its public RSS feed. A link verifies feed availability, not ownership of the Letterboxd account. If you upload your own export, Movie Bot processes its ZIP/CSV contents in memory and retains the imported records and deduplication references. Original upload archives are not intentionally saved to the server. Interrupted imports require you to re-upload the file.
The Import and Export pages can read and convert files in your browser without uploading them. Account transfers require a private code from /settings website, valid for 10 minutes and one use. Connection credentials are held in browser memory for up to 30 minutes; they are not saved in cookies or browser storage. Server-side codes, sessions and uploaded previews are held temporarily in memory. Previews expire after 10 minutes. Nothing is imported until you confirm, and the import keeps your profile private by default. Disconnecting or requesting a new code revokes the previous connection. Downloads can include your private data; keep exported files secure.
4. Visibility and public statistics
New bot profiles default to public. Public ratings, reviews, diaries, lists, and profile data can be read through the bot. Use /settings privacy visibility:private to restrict your profile, and choose private visibility for lists you do not want to share. Choose friends visibility to share your profile and history only with accepted friends. Pending requests grant no access. Removing or blocking a friend revokes friendship access. Setting a profile private does not remove Discord messages or copies that were already posted.
Images in authorized bot responses use signed links that expire after 24 hours. The image service rechecks the original viewer’s current permission and whether the image is still selected. Anyone holding a valid image link can use it while that permission remains valid, so do not share private image URLs. Changing privacy invalidates earlier links, but cannot remove images already downloaded or cached by Discord.
The website publishes aggregate totals, anonymous command-use counters, service-health samples, and title rankings. Rankings use public profiles only and do not return user IDs, names, avatars, or review text. The four largest connected servers may be featured with their names, icons, and member counts; server cards do not expose invitations.
5. Purposes and third-party requests
Data is used to provide your library, social features, imports, requested reminders, privacy controls, exports, abuse prevention, and service operation. Movie Bot does not sell your data. Authorized operators can access protected server records for maintenance or a support request.
TMDB receives catalog searches, title identifiers, language, and region parameters needed for movie information and streaming offers. Movie Bot does not send your review text or Discord user ID to TMDB. RSS synchronization contacts Letterboxd for the linked public feed. Discord handles bot interactions and message delivery. Links to external services are subject to those services’ own policies.
If the operator enables the discordbotlist.com integration, Movie Bot sends that service its public bot ID, aggregate server count, and public slash-command definitions. This integration does not send Discord user IDs, usernames, server identities, viewing histories, ratings, or review text, and does not collect votes.
6. Retention
Bot-owned account records, saved reviews, private drafts, imports, and operational receipts have no automatic expiry at present. They remain until you remove the supported records or the operator fulfills a deletion request. Anonymous command counters persist for statistics. Detailed command windows and availability samples are automatically removed after 90 days. Missing availability observations are left untracked.
Protected deployment/database backups currently have no automatic expiry and may contain older data. They are not served by this website. When requesting deletion, ask the operator to include retained imports, draft backups, and backup copies in the request. Deletion and any constraints on retained copies are handled by the operator; this website does not claim that changing a setting erases backups.
7. Export, correction, and deletion
Use /profile export for a private JSON/CSV download of your bot-owned records. Use the relevant bot commands to edit or remove reviews, diary entries, lists, follows, and watchlist entries. /review drafts draft_id:ID downloads an original review backup.
For an account-wide deletion, correction, or privacy question, contact Romy in Romy’s Studio. Provide your Discord user ID so ownership can be checked; do not post your export or private review text publicly. There is no automated account-deletion command. Requests are reviewed by the operator, including any rights and requirements that apply to your situation.
8. Security and updates
Bot credentials and databases stay on the server and are not included in frontend bundles. The statistics API is read-only, listens on localhost, and is exposed through the site’s HTTPS proxy. Application logs exclude review contents and credentials. Access controls and backups reduce risk, but no service can promise absolute security.
Policy changes will appear here with an updated effective date. Movie Bot is not affiliated with Discord, Letterboxd, TMDB, or JustWatch.