diff --git a/api/prisma/migrations/20240728012747_add_mime_type_to_image/migration.sql b/api/prisma/migrations/20240728012747_add_mime_type_to_image/migration.sql
new file mode 100644
index 0000000..656d7c6
--- /dev/null
+++ b/api/prisma/migrations/20240728012747_add_mime_type_to_image/migration.sql
@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "Image" ADD COLUMN     "mime_type" TEXT NOT NULL DEFAULT '';
diff --git a/api/prisma/schema.prisma b/api/prisma/schema.prisma
index 8a2d503..53d2259 100644
--- a/api/prisma/schema.prisma
+++ b/api/prisma/schema.prisma
@@ -85,9 +85,10 @@ model Comment {
 }
 
 model Image {
-  id    String @id @default(dbgenerated("gen_random_uuid()")) @db.Uuid
-  name  String @unique
-  image Bytes
+  id       String @id @default(dbgenerated("gen_random_uuid()")) @db.Uuid
+  name     String @unique
+  image    Bytes
+  mimetype String @map("mime_type") @default("")
 }
 
 enum Role {
diff --git a/api/src/image/daos/image.dao.ts b/api/src/image/daos/image.dao.ts
index 7e7439b..21de2df 100644
--- a/api/src/image/daos/image.dao.ts
+++ b/api/src/image/daos/image.dao.ts
@@ -5,24 +5,31 @@ import { PrismaService } from '../../prisma/prisma.service';
 export class ImageDao {
   constructor(private readonly prisma: PrismaService) {}
 
-  getImage(filename: string) {
+  getImage(username: string) {
     return this.prisma.image.findUniqueOrThrow({
       where: {
-        name: filename,
+        name: username,
       },
     });
   }
 
-  createImage(filename: string, image: Buffer) {
-    return this.prisma.image.create({
-      data: { name: filename, image },
+  createImage(username: string, mimetype: string, image: Buffer) {
+    return this.prisma.image.upsert({
+      where: {
+        name: username,
+      },
+      update: {
+        mimetype,
+        image,
+      },
+      create: { name: username, image, mimetype },
     });
   }
 
-  async deleteImage(filename: string) {
-    return await this.prisma.image.delete({
+  deleteImage(username: string) {
+    this.prisma.image.delete({
       where: {
-        name: filename,
+        name: username,
       },
     });
   }
diff --git a/api/src/image/image.controller.ts b/api/src/image/image.controller.ts
index 735bf36..df3fd8b 100644
--- a/api/src/image/image.controller.ts
+++ b/api/src/image/image.controller.ts
@@ -10,8 +10,8 @@ export class ImageController {
   @Public()
   @Get('/:name')
   async getImage(@Param('name') name: string, @Res() res: Response) {
-    const image = await this.imageService.getImage(name);
+    const { image, mimetype } = await this.imageService.getImage(name);
 
-    res.end(image);
+    res.contentType(mimetype).end(image);
   }
 }
diff --git a/api/src/image/image.service.ts b/api/src/image/image.service.ts
index d84c8fc..d3587e3 100644
--- a/api/src/image/image.service.ts
+++ b/api/src/image/image.service.ts
@@ -1,25 +1,19 @@
-import { Injectable, NotFoundException } from '@nestjs/common';
+import { Injectable } from '@nestjs/common';
 import { ImageDao } from './daos/image.dao';
 
 @Injectable()
 export class ImageService {
   constructor(private imageDao: ImageDao) {}
 
-  async getImage(filename: string) {
-    const { image } = await this.imageDao.getImage(filename);
-
-    if (!image) {
-      throw new NotFoundException('No image found');
-    }
-
-    return image;
+  async getImage(username: string) {
+    return this.imageDao.getImage(username);
   }
 
-  async createImage(filename: string, image: Buffer) {
-    return this.imageDao.createImage(filename, image);
+  async createImage(username: string, mimetype: string, image: Buffer) {
+    return this.imageDao.createImage(username, mimetype, image);
   }
 
-  async deleteImage(filename: string) {
-    return await this.imageDao.deleteImage(filename);
+  async deleteImage(username: string) {
+    return this.imageDao.deleteImage(username);
   }
 }
diff --git a/api/src/user/user.controller.spec.ts b/api/src/user/user.controller.spec.ts
index 2fa1a9c..a275aaf 100644
--- a/api/src/user/user.controller.spec.ts
+++ b/api/src/user/user.controller.spec.ts
@@ -97,8 +97,13 @@ describe('UserController', () => {
       },
     };
     fakeImageService = {
-      async getImage(name: string) {
-        return Buffer.from(name);
+      getImage: (name: string) => {
+        return Promise.resolve({
+          id: '1234',
+          name,
+          image: Buffer.from(name),
+          mimetype: 'image/jpeg',
+        });
       },
     };
 
diff --git a/api/src/user/user.controller.ts b/api/src/user/user.controller.ts
index 5ec15a2..195e327 100644
--- a/api/src/user/user.controller.ts
+++ b/api/src/user/user.controller.ts
@@ -29,6 +29,7 @@ import { QueryDto } from './dto/query.dto';
 import { RemoveFieldsInterceptor } from './interceptor/remove-fields.interceptor';
 import { FriendStatus } from './user.service';
 import { ImageService } from '../image/image.service';
+import { AVATAR_MAX_SIZE } from 'src/utils';
 
 declare global {
   // eslint-disable-next-line @typescript-eslint/no-namespace
@@ -108,14 +109,14 @@ export class UserController {
   }
 
   @UseInterceptors(RemoveFieldsInterceptor)
-  @HttpCode(HttpStatus.NO_CONTENT)
+  @HttpCode(HttpStatus.CREATED)
   @Post('/avatar')
   @UseInterceptors(FileInterceptor('image'))
   async createAvatar(
     @UploadedFile(
       new ParseFilePipe({
         validators: [
-          new MaxFileSizeValidator({ maxSize: 5 * 1024 * 1024 }),
+          new MaxFileSizeValidator({ maxSize: AVATAR_MAX_SIZE }),
           new FileTypeValidator({ fileType: '.(png|jpeg|gif)' }),
         ],
       }),
@@ -125,27 +126,18 @@ export class UserController {
   ) {
     if (!req.user) throw new UnauthorizedException('user not found');
 
-    const extension = file.originalname
-      .split('.')
-      .slice(-1) as unknown as string;
     const { username } = req.user;
-    const avatarName = `${username}.${extension}`;
-
-    if (req.user.avatarName) {
-      this.imageService.deleteImage(req.user.avatarName);
-    }
-
-    this.userService.updateUser(req.user.id, { avatarName });
+    const { mimetype } = file;
 
-    return this.imageService.createImage(avatarName, file?.buffer);
+    return this.imageService.createImage(username, mimetype, file?.buffer);
   }
 
   @UseInterceptors(RemoveFieldsInterceptor)
   @UseGuards(AdminGuard)
   @HttpCode(HttpStatus.NO_CONTENT)
   @Delete('/avatar')
-  deleteAvatar(@Req() req: Request) {
+  async deleteAvatar(@Req() req: Request) {
     if (!req.user) throw new UnauthorizedException('user not found');
-    return this.imageService.deleteImage(req.user?.username);
+    await this.imageService.deleteImage(req.user?.username);
   }
 }
diff --git a/api/src/utils/constants.ts b/api/src/utils/constants.ts
index 237789c..8f13a54 100644
--- a/api/src/utils/constants.ts
+++ b/api/src/utils/constants.ts
@@ -1,2 +1,3 @@
 export const PER_PAGE = 500;
 export const PAGE_NUMBER = 0;
+export const AVATAR_MAX_SIZE = 5 * 1024 * 1024;
diff --git a/web/src/ambient.d.ts b/web/src/ambient.d.ts
index da8dedf..0b676a0 100644
--- a/web/src/ambient.d.ts
+++ b/web/src/ambient.d.ts
@@ -59,3 +59,11 @@ export type ToastType = {
   dismissible: boolean;
   timeout: number;
 };
+
+export type Stats = {
+  id?: string;
+  listCount: number;
+  moviesCount: number;
+  sharedListCount: number;
+  commentsCount: number;
+};
diff --git a/web/src/lib/Avatar.svelte b/web/src/lib/Avatar.svelte
index 11a8dbb..8a82625 100644
--- a/web/src/lib/Avatar.svelte
+++ b/web/src/lib/Avatar.svelte
@@ -1,6 +1,7 @@
 <script lang="ts">
   import { env } from '$env/dynamic/public';
   import { onMount } from 'svelte';
+  import { PROFILE_IMAGE_PLACEHOLDER } from '../utils';
   export let username: string;
   export let isLarge: Boolean = false;
 
@@ -9,13 +10,22 @@
   let failed = false;
   let loading = false;
 
-  const imageClass = `inline-block text-center rounded-full bg-accent text-text select-none ${
-    isLarge ? 'h-24 w-24 text-8xl' : 'h-6 w-6 has-tooltip'
+  const avatarBaseClass =
+    'inline-block text-center rounded-full bg-accent text-text select-none';
+
+  const imageClass = `${avatarBaseClass} ${
+    isLarge ? 'h-56 w-56 text-8xl content-center' : 'h-6 w-6 has-tooltip'
+  }`;
+
+  const initialClass = `${avatarBaseClass} ${
+    isLarge ? 'w-64 h-64 text-8xl content-center ' : 'h-6 w-6 has-tooltip'
   }`;
+
   const fullPath = `${env.PUBLIC_API_HOST || 'http://localhost:4000'}/images/${username}`;
+  let img: HTMLImageElement;
 
   onMount(() => {
-    const img = new Image();
+    img = new Image();
     img.src = fullPath;
     loading = true;
 
@@ -33,12 +43,16 @@
 {#if loaded}
   <img class="{imageClass}" src="{fullPath}" alt="Avatar" />
 {:else if failed}
-  <div class="{imageClass}">
-    <span class="tooltip rounded-lg bg-background text-text p-2 mt-5 -ml-5"
-      >{username}</span
-    >
-    {initial}
-  </div>
+  {#if isLarge}
+    <img class="{imageClass}" src="{PROFILE_IMAGE_PLACEHOLDER}" alt="Avatar" />
+  {:else}
+    <div class="{initialClass}">
+      <span class="tooltip rounded-lg bg-background text-text p-2 mt-5 -ml-5"
+        >{username}</span
+      >
+      {initial}
+    </div>
+  {/if}
 {:else if loading}
   <img
     class="{imageClass}"
diff --git a/web/src/routes/user/profile/+page.server.ts b/web/src/routes/user/profile/+page.server.ts
new file mode 100644
index 0000000..d188a7d
--- /dev/null
+++ b/web/src/routes/user/profile/+page.server.ts
@@ -0,0 +1,69 @@
+import { API_HOST } from '$env/static/private';
+import { fail } from '@sveltejs/kit';
+import type { Stats } from '../../../ambient';
+import type { RequestEvent } from '../$types';
+
+const API = process.env.API_HOST || API_HOST || 'http://localhost:4000';
+
+/** @type {import('./$types').PageServerLoad} */
+export const load = async ({ fetch, locals }) => {
+  const { user } = locals;
+
+  if (!user) {
+    return {};
+  }
+
+  try {
+    const userStats = await fetch(`${API}/users/${user.id}/stats`, {
+      method: 'GET',
+      headers: {
+        Authorization: locals.cookie as string
+      }
+    });
+
+    if (userStats.status !== 200) {
+      return { user: user };
+    }
+
+    const stats: Stats = await userStats.json();
+
+    return { user, stats };
+  } catch (e) {
+    console.error(e);
+  }
+};
+
+/** @type {import('./$types').Actions} */
+export const actions = {
+  saveAvatar: async ({ request, fetch, locals }: RequestEvent) => {
+    const data = await request.formData();
+    const avatar = data.get('file') as File;
+
+    if (!(avatar as File).name || (avatar as File).name === 'undefined') {
+      return fail(400, {
+        error: true,
+        message: 'You must provide a file to upload'
+      });
+    }
+
+    const image = new Blob([await avatar.arrayBuffer()], { type: avatar.type });
+    const formData = new FormData();
+    formData.set('image', image, avatar.name);
+
+    try {
+      const response = await fetch(`${API}/users/avatar`, {
+        method: 'POST',
+        headers: {
+          Authorization: locals.cookie as string
+        },
+        body: formData
+      });
+
+      if (response.status !== 201) {
+        return fail(response.status);
+      }
+    } catch (e) {
+      console.error(e);
+    }
+  }
+};
diff --git a/web/src/routes/user/profile/+page.svelte b/web/src/routes/user/profile/+page.svelte
index 9c06050..e40d31b 100644
--- a/web/src/routes/user/profile/+page.svelte
+++ b/web/src/routes/user/profile/+page.svelte
@@ -1,25 +1,64 @@
 <script lang="ts">
+  /** @type {import('./$types').PageData} */
+  import { enhance, applyAction } from '$app/forms';
   import Avatar from '$lib/Avatar.svelte';
   import Nav from '$lib/Nav/Nav.svelte';
-  import type { User } from '../../../ambient';
+  import Toasts from '$lib/Toast/Toasts.svelte';
+  import { addToast } from '../../../store';
+  import { error, success } from './messages';
 
-  export let data: {
-    user: User;
+  export let data;
+  const { user, stats } = data;
+  let trigger = {};
+
+  const reload = () => {
+    trigger = {};
   };
-  const { user } = data;
 </script>
 
+<Toasts />
+
 <Nav username="{user.username}" />
-<div class="flex max-w-4xl mt-20">
-  <div class="w-1/5 mx-auto">
-    <div class="m-auto text-center">
+<div class="sm:flex w-full justify-around mt-20 mx-auto">
+  <div class="max-w-64 text-center mx-auto mb-8 sm:mb-0">
+    {#key trigger}
       <Avatar username="{user.username}" isLarge />
-      <div class="mt-2">{user.username}</div>
-    </div>
+    {/key}
+    <form
+      method="POST"
+      action="?/saveAvatar"
+      use:enhance="{() => {
+        return async ({ result }) => {
+          if (result.type === 'failure') {
+            addToast(error);
+          } else if (result.type === 'success') {
+            addToast(success);
+            reload();
+          }
+          await applyAction(result);
+        };
+      }}"
+      enctype="multipart/form-data"
+    >
+      <input
+        type="file"
+        name="file"
+        accept="image/jpg, image/png"
+        class="mt-4 p-0 file:mr-2 file:py-2 file:px-2
+            file:rounded-full file:border-0
+            file:text-sm file:bg-primary max-w-64"
+        required
+      />
+      <button type="submit" class="mt-4">Upload</button>
+    </form>
   </div>
-  <div class="flex-grow pl-2 pt-2">
-    <div class="mb-2">email: {user.email}</div>
-    <div class="mb-2">lists: N/A</div>
-    <div class="mb-2">watched movies: N/A</div>
+  <div
+    class="max-w-md sm:max-w-xl mx-auto text-xl sm:text-2xl grid content-evenly pl-8 sm:pl-0"
+  >
+    <div>email: {user.email}</div>
+    <div>lists: {stats.listCount}</div>
+    <div>movies: {stats.moviesCount}</div>
+    <div>shared with you: {stats.sharedListCount}</div>
+    <div>comments: {stats.commentsCount}</div>
   </div>
 </div>
diff --git a/web/src/routes/user/profile/messages.ts b/web/src/routes/user/profile/messages.ts
new file mode 100644
index 0000000..031cd88
--- /dev/null
+++ b/web/src/routes/user/profile/messages.ts
@@ -0,0 +1,18 @@
+import { type ToastType } from '../../../ambient.d';
+
+const messageCommonProps = {
+  dismissible: true,
+  timeout: 3000
+};
+
+export const error: ToastType = {
+  message: 'There was an error updating your avatar',
+  type: 'error',
+  ...messageCommonProps
+};
+
+export const success: ToastType = {
+  message: 'Avatar updated',
+  type: 'success',
+  ...messageCommonProps
+};
diff --git a/web/src/utils/consts.ts b/web/src/utils/consts.ts
index eb7451d..79ce40a 100644
--- a/web/src/utils/consts.ts
+++ b/web/src/utils/consts.ts
@@ -1,2 +1,3 @@
 export const LIST_PLACEHOLDER = '/list-placeholder.png';
 export const LISTS_PER_PAGE = 8;
+export const PROFILE_IMAGE_PLACEHOLDER = '/user-profile-placeholder.png';
diff --git a/web/static/user-profile-placeholder.png b/web/static/user-profile-placeholder.png
new file mode 100644
index 0000000..e8a1a7a
Binary files /dev/null and b/web/static/user-profile-placeholder.png differ