Boxd Card

Privacy Policy — Last updated: November 2026

What this extension does

Boxd Card is a Chrome browser extension that reads your Letterboxd profile page and generates a shareable image card showing your last four watched films, favorites, recent diary entries, lists, or reviews.

By default, all processing happens locally in your browser. You can optionally enable TMDB enrichment in the extension's settings — off by default — which pulls backdrops, higher-resolution posters, and film metadata from The Movie Database via our Cloudflare Worker. Details below.

There is also a web app version of Boxd Card which uses the same Cloudflare Worker to proxy requests to Letterboxd (and, when enabled, to TMDB) on your behalf. This allows you to generate cards without installing a browser extension.

Neither version of Boxd Card collects personal data on its own. The one exception is feedback you choose to send from the extension, described below under Feedback you send us. Both versions are subject to this privacy policy.

Data we collect

Boxd Card does not collect, store, or share any personal data, except what you choose to put in a feedback report (see Feedback you send us).

• No account is required.
• The Chrome extension sends no analytics or telemetry. All processing happens locally in your browser. It only contacts our server about errors or feedback when you fill in the feedback form and press Send.
• The web app (boxd-card.com) and the About page (/about) send anonymous usage telemetry to our self-hosted Grafana Cloud instance via a Cloudflare Worker proxy at grafana.michaellamb.dev. Details below under Web analytics.
• When TMDB enrichment is off (the default for the extension), no data leaves your browser except the poster and page fetches Letterboxd already serves publicly, and any feedback you choose to send.
• When TMDB enrichment is on, each card generation sends one HTTPS request per film to our Cloudflare Worker containing only the film's Letterboxd slug (for example dune-2021). No username, Letterboxd account, IP identifier, or other personal data is transmitted. The worker caches TMDB responses for 7 days and does not log who fetched what.

Web analytics (web app and About page only)

To understand which features people use and where errors happen, the web app and the About page send anonymous usage events to our Grafana Cloud project. The Chrome extension does not.

What we collect:

• Page views and clicks on links/buttons (e.g. "Chrome Web Store", "Web App", "GitHub").
• Card-generation outcomes: card type chosen, layout, whether TMDB was enabled, and whether the generation succeeded or failed.
• Errors from the scraper proxy (HTTP status code and target host, e.g. letterboxd.com).
• Default web vitals (page load timing, core web vitals) and unhandled JavaScript errors.

What we do not collect:

• The Letterboxd username or URL you paste into the web app.
• Any list slug, film slug, review text, or other content from the cards you generate.
• Generated card images — they remain in your browser memory only.

Those exclusions are enforced in code, not just by convention. Every request the web app makes carries your Letterboxd URL or a film slug in its query string, and analytics SDKs record full request URLs by default. Before any telemetry leaves your browser we strip query strings and fragments from every recorded URL — page addresses, network timings, and traces alike — keeping only the origin and path. Free-text error messages are scrubbed the same way. The ?url= hand-off from the About page is removed from the address bar before analytics starts, so it is never recorded at all.

Telemetry is routed through our own Cloudflare Worker (grafana.michaellamb.dev) before reaching Grafana Cloud, which acts as the storage backend.

Feedback you send us (extension only)

The extension has a Send feedback button next to its settings gear, and a Report this error link appears when card generation fails. Nothing is sent unless you fill in the form and press Send. The form shows you exactly what will be sent before you send it.

A feedback report contains:

• Whether it is a problem report or general feedback, and the message you type.
• Your email address, only if you enter one. It is used only to reply to you.
• Diagnostics, only if the "Include diagnostics" box is ticked (it is ticked by default for problem reports and unticked for general feedback): the extension version, your browser's user-agent string (browser and operating-system versions), the card type, layout and count you had selected, whether TMDB enrichment was on, and the error message shown in the popup.

A feedback report does not contain:

• The Letterboxd page URL or your username. The extension removes web addresses and letterboxd.com/… paths from error messages before you see the preview, and our server removes them again when the report arrives. A username or URL is only included if you type it into the message yourself.
• Your IP address. Our server does not store it with the report.
• Any generated card image, film list, or review text.

Reports are sent to our Cloudflare Worker (api.boxd-card.com). The Worker saves each one in Cloudflare Workers KV, which deletes it automatically after 180 days. It also emails a copy to the developer's inbox at michaellamb.dev, sent through Cloudflare Email. Reports are read only to fix problems and improve Boxd Card, and they are never sold or shared. To have a report deleted sooner, email [email protected] with the reference code the extension shows after sending.

How the extension works

When you click Generate Card on a Letterboxd profile page, the extension:

1. Reads film titles, ratings, and poster image URLs directly from the page you are already viewing.
2. Fetches poster images from Letterboxd's CDN (a.ltrbxd.com) using your browser's built-in fetch capability — the same images your browser would load anyway.
3. Only if you have enabled TMDB enrichment in settings: sends each film's Letterboxd slug to our Cloudflare Worker (api.boxd-card.com), which looks up the matching record on TMDB and returns public film metadata and image URLs. TMDB posters and backdrops are then fetched from image.tmdb.org.
4. Draws those images onto an HTML5 Canvas element entirely within your browser tab to produce the card PNG.

The generated image exists only in your browser's memory until you choose to download or copy it. It is never uploaded anywhere.

Permissions

The extension requests the following Chrome permissions:

• activeTab — to read the URL of the tab you are on and confirm it is a Letterboxd profile page.
• clipboardWrite — to copy the generated card image to your clipboard when you click Copy.
• storage — to persist your display preferences (layout, toggles, opt-in state), and, when Remember my username is on, to cache your Letterboxd username and avatar URL so the popup can link straight to your profile from any tab. That cache stays on your device; it is never sent anywhere, and turning the setting off clears it.
• scripting — to read the logged-in Letterboxd username from the active tab so the navigation hint can include it.
• Host access to letterboxd.com, a.ltrbxd.com, s.ltrbxd.com — to fetch poster images and static assets that are already publicly visible on the page.
• Host access to api.boxd-card.com — used when TMDB enrichment is enabled, to fetch film metadata via our Cloudflare Worker proxy to TMDB, and when you send a feedback report. No requests are made to this host otherwise.
• Host access to image.tmdb.org — used only when TMDB enrichment is enabled, to fetch the posters and backdrops the worker returns.

Third-party services

Boxd Card accesses Letterboxd's publicly available web pages and CDN assets on your behalf, the same way a normal browser visit does. It is subject to Letterboxd's own Privacy Policy. This extension is not affiliated with or endorsed by Letterboxd.

When TMDB enrichment is enabled, Boxd Card additionally queries The Movie Database (TMDB) through our Cloudflare Worker and loads images from image.tmdb.org. These requests are subject to TMDB's Privacy Policy and Terms of Use. This product uses the TMDB API but is not endorsed or certified by TMDB.

Changes to this policy

If this policy changes, the updated version will be posted at this URL with a revised date.

Contact

Questions? Open an issue at github.com/michaellambgelo/boxd-card, or email [email protected].

← Back to Boxd Card