Privacy Policy
Last updated: September 2026
This privacy policy is available in English, French and Spanish. Each language version is equally valid.
1. Data Controllers
This site involves two separate data controllers. TribuShare is the controller for everything to do with a purchase, being the seller of record; the site publisher is the controller for data it receives and uses for its own purposes. The site publisher can see and export the name and email address of the people who buy, rent, receive access to or follow its films on this site.
| Admin | Site publisher, support@tribushare.com |
| SYLOE GROUP, SAS (TribuShare) | Platform operator, privacy@tribushare.com |
TribuShare's full privacy policy is available at tribushare.com/legal/privacy.
2. Data Collected
| Email, name | Contract (Art. 6.1.b). Account creation. Retained for the duration of the account + 3 years |
| Payment data | Contract (Art. 6.1.b). Transaction processing. Processed by Stripe (TribuShare does not store card numbers) |
| Viewing data | Legitimate interest (Art. 6.1.f). Creator analytics, refund decisions. Access period + 3 years |
| IP address | Legitimate interest (Art. 6.1.f). Security, territory restrictions, consent proof; page views are measured under a daily rotating hash. 6 months, longer for consent proof |
| Strictly necessary cookies | Legitimate interest. Authentication, session, security. Up to 60 days (session), see the Cookie Policy |
| Analytics cookies (if consent) | Consent (Art. 6.1.a). Service improvement. 13 months max |
3. Sub-processors
| Stripe, Inc. | Payments. US (DPF certified). EU-US DPF + SCCs |
| Neon, Inc. | Database. United Kingdom (AWS London). UK adequacy decision |
| Amazon Web Services | Video encoding. EU (Paris) |
| Cloudflare, Inc. | Hosting, CDN, R2 storage, video delivery, security. Global (EU primary). SCCs |
| Brevo | Email. EU (France) |
| PostHog | Product analytics. EU |
| Sentry | Error monitoring. EU (Germany) |
4. Your Rights
Under the General Data Protection Regulation (GDPR) and applicable national laws, you have the following rights:
- Access: obtain a copy of your personal data
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your data
- Portability: receive your data in a structured, machine-readable format
- Restriction: restrict processing in certain circumstances
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: where processing is based on consent, withdraw it at any time
Contact: privacy@tribushare.com. Response within 30 days.
Supervisory authority: CNIL, 3 place de Fontenoy, 75007 Paris, www.cnil.fr
Exercising your rights regarding Creator-held data:
To exercise your rights regarding data held by Admin, contact support@tribushare.com. For data held by TribuShare, contact privacy@tribushare.com.