Your credentials are used to authenticate with Letterboxd. Only your encrypted refresh token is stored.