Privacy Policy

Last updated: March 2026

1. Data Controllers

This site involves two separate data controllers:

Avatar	Site publisher, content seller — [email protected]
SYLOE GROUP, SAS (TribuShare)	Platform operator — [email protected]

TribuShare's full privacy policy is available at tribushare.com/legal/privacy.

Email, name	Contract (Art. 6.1.b) — Account creation — Retained for the duration of the account + 3 years
Payment data	Contract (Art. 6.1.b) — Transaction processing — Processed by Stripe (TribuShare does not store card numbers)
Viewing data	Legitimate interest (Art. 6.1.f) — Creator analytics, withdrawal right determination — Access period + 3 years
IP address (hashed)	Legitimate interest (Art. 6.1.f) — Security, DRM geolocation, consent proof — 6 months
Strictly necessary cookies	Legitimate interest — Authentication, session, security — Session
Analytics cookies (if consent)	Consent (Art. 6.1.a) — Service improvement — 13 months max

Stripe, Inc.	Payments — US (DPF certified) — EU-US DPF + SCCs
Neon, Inc.	Database — US (EU region) — DPF + SCCs
Gumlet	Video streaming — Global (EU primary) — SCCs
Cloudflare, Inc.	CDN, security — Global (EU primary) — SCCs

Under the General Data Protection Regulation (GDPR) and applicable national laws, you have the following rights:

Access: obtain a copy of your personal data
Rectification: correct inaccurate or incomplete data
Erasure: request deletion of your data
Portability: receive your data in a structured, machine-readable format
Restriction: restrict processing in certain circumstances
Objection: object to processing based on legitimate interest
Withdrawal of consent: where processing is based on consent, withdraw it at any time

Contact: [email protected] — Response within 30 days

Supervisory authority: CNIL — 3 place de Fontenoy, 75007 Paris — www.cnil.fr

To exercise your rights regarding data held by Avatar, contact [email protected]. For data held by TribuShare, contact [email protected].