Privacy
Plain answers about what we collect and why. Questions or requests: butter@popcorn.movie.
What we collect
- Your Google account basics when you sign in: Google account id, email, display name, avatar. Sign-in requests the YouTube read-only scope so you can claim your channel and import your uploads; we never post to your channel.
- Your activity here: ratings, verdicts, notes, favourites, lists, adds, and how much of a film you watched (used to verify that votes come from people who actually watched).
- Abuse-prevention signals with each vote and each add: IP address, coarse user-agent string, account age. Lawful basis: legitimate interest, fraud and abuse prevention for a public voting system. These signals are used for clustering and review by a human, never for automated punishment.
Retention
Raw IP addresses are kept for 90 days, then irreversibly replaced by a salted hash. Sessions expire after 90 days. YouTube-derived metadata (titles, thumbnails, view counts) is refreshed or deleted within 30 days per YouTube's API terms.
Deletion
Delete your own account any time from your profile, votes, notes, breakdowns, lists and favourites go with it, and aggregate scores recompute without you. Films you added to the catalogue stay, anonymized. Or email butter@popcorn.movie and we do it for you.
Cookies
One: pm_sess, which keeps you signed in. A second short-lived one exists for ten minutes during Google sign-in to stop request forgery. That's the entire list. No tracking cookies, no analytics cookies, no advertising cookies; our own traffic counting happens server-side with no cookie at all. This is why there's no consent pop-up: consent is required for tracking, and there isn't any.
Third parties
Films play via youtube-nocookie.com, YouTube's reduced-tracking player; YouTube's own privacy policy applies to playback. We use Google sign-in. We run no third-party analytics and no ad trackers.