Privacy Policy
Last updated: October 2026
This privacy policy is available in English, French and Spanish. Each language version is equally valid.
1. Data Controllers
This site involves two separate data controllers. TribuShare is the controller for everything to do with a purchase, being the seller of record; the site publisher is the controller for data it receives and uses for its own purposes. The site publisher can see and export the name and email address of the people who buy, rent, receive access to or follow its films on this site.
| Admin | Site publisher, support@tribushare.com |
| SYLOE GROUP, SAS (TribuShare) | Platform operator, privacy@tribushare.com |
If the site publisher adds a Meta Pixel or a Google tag to this site, or connects the Meta Conversions API, it is the controller of this advertising measurement and TribuShare runs these tools on its behalf, only if you accept Advertising cookies.
TribuShare's full privacy policy is available at tribushare.com/legal/privacy.
2. Data Collected
| Email, name | Contract (Art. 6.1.b). Account creation. Retained for the duration of the account + 3 years |
| Payment data | Contract (Art. 6.1.b). Transaction processing. Processed by Stripe (TribuShare does not store card numbers) |
| Viewing data | Legitimate interest (Art. 6.1.f). Creator analytics, refund decisions. Access period + 3 years |
| IP address | Legitimate interest (Art. 6.1.f). Security, territory restrictions, consent proof; page views are measured under a daily rotating hash. 6 months, longer for consent proof |
| Strictly necessary cookies | Legitimate interest. Authentication, session, security. Up to 60 days (session), see the Cookie Policy |
| Analytics cookies (if consent) | Consent (Art. 6.1.a). Service improvement. 13 months max |
| Campaign attribution | Legitimate interest (Art. 6.1.f) for the campaign tags (UTM) of a single visit; Consent (Art. 6.1.a), given with analytics cookies to remember the campaign between visits, and with Advertising cookies to keep the ad click id. Counts the visits, follows and sales each campaign brings to the site publisher. The campaign tags stay with the checkout, purchase or follow they count; the click id is deleted after 7 days at most |
| Advertising cookies (if consent) | Consent (Art. 6.1.a). Only if the site publisher has added a Meta Pixel or a Google tag, or connected the Meta Conversions API: the pages and offers you view, the checkouts you start, your sign-ups and your purchases are sent to Meta or Google for the advertising of the site publisher, with, for the Conversions API, your email address, account identifier and country hashed (SHA-256), your IP address and your browser. Kept by TribuShare for 7 days at most, by Meta and Google under their own terms |
3. Sub-processors
| Stripe, Inc. | Payments. US (DPF certified). EU-US DPF + SCCs |
| Neon, Inc. | Database. United Kingdom (AWS London). UK adequacy decision |
| Amazon Web Services | Video encoding. EU (Paris) |
| Cloudflare, Inc. | Hosting, CDN, R2 storage, video delivery, security. Global (EU primary). SCCs |
| Brevo | Email. EU (France) |
| PostHog | Product analytics. EU |
| Sentry | Error monitoring. EU (Germany) |
Meta and Google are not sub-processors of TribuShare. If the site publisher has added a Meta Pixel or a Google tag, or connected the Meta Conversions API, Meta Platforms Ireland Limited and Google Ireland Limited receive the events described in Section 2 under the terms they agree with the site publisher, and may transfer them to Meta Platforms, Inc. and Google LLC in the United States, both certified under the EU-US Data Privacy Framework.
4. Your Rights
Under the General Data Protection Regulation (GDPR) and applicable national laws, you have the following rights:
- Access: obtain a copy of your personal data
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your data
- Portability: receive your data in a structured, machine-readable format
- Restriction: restrict processing in certain circumstances
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: where processing is based on consent, withdraw it at any time
Contact: privacy@tribushare.com. Response within 30 days.
Supervisory authority: CNIL, 3 place de Fontenoy, 75007 Paris, www.cnil.fr
Exercising your rights regarding Creator-held data:
To exercise your rights regarding data held by Admin, contact support@tribushare.com. For data held by TribuShare, contact privacy@tribushare.com.