Privacy

Plain answers about what we collect and why. Questions or requests: butter@popcorn.movie.

What we collect

• Your Google account basics when you sign in: Google account id, email, display name, avatar. Sign-in requests the YouTube read-only scope so you can claim your channel and import your uploads; we never post to your channel.
• Your activity here: ratings, verdicts, notes, favourites, lists, adds, and how much of a film you watched (used to verify that votes come from people who actually watched).
• Abuse-prevention signals with each vote and each add: IP address, coarse user-agent string, account age. Lawful basis: legitimate interest — fraud and abuse prevention for a public voting system. These signals are used for clustering and review by a human, never for automated punishment.

Retention

Raw IP addresses are kept for 90 days, then irreversibly replaced by a salted hash. Sessions expire after 90 days. YouTube-derived metadata (titles, thumbnails, view counts) is refreshed or deleted within 30 days per YouTube's API terms.

Deletion

Email butter@popcorn.movie from your account address and we delete your account and personal data. Aggregate scores recompute without your votes.

Third parties

Films play via youtube-nocookie.com, YouTube's reduced-tracking player; YouTube's own privacy policy applies to playback. We use Google sign-in. We run no third-party analytics and no ad trackers.