Cookie Policy
Last updated: October 2026
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the website recognize your device on subsequent visits, remember your preferences, and provide a better user experience. Similar technologies include web beacons, pixels, and local storage.
2. How We Use Cookies
TribuShare uses cookies and similar technologies for the following purposes, on tribushare.com, on film pages and company pages, and on storefronts.
2.1 Strictly Necessary Cookies
These cookies are essential for the operation of the Service. They enable core functionality such as authentication, security, and session management. Without these cookies, the Service cannot function properly. These cookies do not require your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookie__Secure-better-auth.session_token | ProviderTribuShare | PurposeKeeps you signed in | Duration60 days, renewed while you use the Service |
| Cookie__Secure-better-auth.session_data | ProviderTribuShare | PurposeShort-lived copy of your session, to avoid a lookup on every page | Duration5 minutes |
| Cookie__Secure-better-auth.dont_remember | ProviderTribuShare | PurposeSigns you out when you close the browser, if you asked not to be remembered | DurationUntil you close your browser |
| Cookiebetter-auth.last_used_login_method | ProviderTribuShare | PurposeRemembers how you last signed in (email code or Google) | Duration30 days |
| Cookiecookie_consent | ProviderTribuShare | PurposeStores your cookie preferences | Duration1 year |
| Cookie__stripe_mid, __stripe_sid | ProviderStripe | PurposeFraud prevention, set by Stripe.js on film pages (which include the checkout), during film onboarding and in the dashboard | Duration1 year and 30 minutes |
| Cookie__cf_bm, cf_clearance | ProviderCloudflare | PurposeBot management and security challenge, when Cloudflare applies one | DurationUp to 30 minutes |
TribuShare also stores, in your browser's local or session storage, a random device identifier sent with video uploads, the state of the dashboard assistant, and technical flags used to recover from a failed page load. They are used only for these features and are strictly necessary for them.
2.2 Analytics Cookies
These cookies help us understand how visitors interact with the Service by collecting information about page visits, traffic sources, and user behavior. This data is used to improve the Service. Analytics cookies are only set with your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookieph_*_posthog | ProviderPostHog (EU cloud) | PurposeProduct analytics: page views, feature usage, and linking your visits to your account when you are signed in | Duration1 year |
| Cookietribu_attrib | ProviderTribuShare | PurposeRemembers the campaign that brought you (UTM tags, the website you came from, and the email you clicked from) | Duration30 days |
With your consent, PostHog also records how you use the pages where a film is published (/publish) and the film catalog, film pages, filmmaker pages, watch and checkout pages, and the For filmmakers, For distributors and Pricing pages: what the page displays, your clicks, scrolling and mouse movements. What you type in form fields is masked, and the payment card fields, which Stripe displays in its own frame, are not recorded. Recording stops when you leave these pages or withdraw your consent.
Until you answer the cookie banner, PostHog sets no cookie, and the analytics events of your visit are held in your browser; they are sent when you answer, or when you leave the page. When you decline analytics or leave without answering, PostHog runs in cookieless mode: it still counts page views and feature usage, but stores nothing on your device and does not link your visits together. Separately, TribuShare measures page views itself without any cookie, using a daily rotating hash of your IP address and browser, and records the steps a Creator reaches when publishing a film from its own servers, as described in the Privacy Policy.
2.3 Functional Cookies
These cookies remember display settings and the last organization and film you opened in the dashboard. They are only set with your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookietribushare.last-org, tribushare.last-context.* | ProviderTribuShare | PurposeReopens the dashboard on the organization and film you last worked on | Duration1 year |
| Cookiesidebar_state | ProviderTribuShare | PurposeDashboard sidebar collapsed or expanded | Duration7 days |
2.4 Share & Earn Cookies
These cookies remember the Share & Earn or share link you arrived from, so the person who shared it can earn credit if you buy or rent the film. They are only set with your consent; without it, the link you arrived from is not remembered.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookietribu_ref | ProviderTribuShare | PurposeShare & Earn attribution | Duration30 days |
| Cookietribu_s | ProviderTribuShare | PurposeRemembers the share link you opened during your visit | DurationUntil you close your browser |
2.5 Advertising Cookies
A Creator may add a Meta Pixel or a Google tag to its storefront, to measure visits and purchases for its advertising. These tags run only on that storefront's account, purchase, gift, library, legal and watch pages, and only with your consent: they are loaded once you accept Advertising cookies. If you withdraw that consent, TribuShare tells the tags that consent is revoked and expires the cookies below.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookie_fbp, _fbc | ProviderMeta | PurposeMeta Pixel: measuring visits and purchases for advertising | DurationSet by Meta, 90 days for _fbp |
| Cookie_ga, _ga_<id>, _gid, _gcl_* | ProviderGoogle | PurposeGoogle tag: measuring visits and purchases for advertising | DurationSet by Google, up to 2 years for _ga |
3. Third-Party Cookies
Third-party services that may set cookies on your device:
- Stripe: payment processing. Cookies necessary for secure payment transactions and fraud prevention, set by Stripe.js on film pages (which include the checkout), during film onboarding and in the dashboard (where you manage your plan and card). Stripe acts as an independent data controller for payment data. See: stripe.com/privacy
- Cloudflare: security and CDN. Strictly necessary cookies for DDoS protection and bot management. See: cloudflare.com/privacypolicy
- PostHog (EU cloud): product analytics and, on some pages, session recordings (Section 2.2). Analytics cookies and recordings only with your consent. See: posthog.com/privacy
- Sentry: error monitoring. Only if you accept analytics cookies, Sentry keeps in your browser's session storage a replay of the last moments of the page, with its text and media masked, and sends it with the error report when an error occurs. See: sentry.io/privacy
- Meta and Google: a Creator may add a Meta Pixel or a Google tag to its storefront. These tags load only if you accept Advertising cookies (Section 2.5); Meta or Google then set their own cookies on that storefront. See: facebook.com/privacy/policy and policies.google.com/privacy
TribuShare does not add advertising cookies of its own on the Service.
4. Managing Your Cookie Preferences
You can manage your cookie preferences in several ways:
4.1 Cookie Consent Banner
When you first visit TribuShare, a cookie consent banner will appear, providing equally prominent "Accept All" and "Reject All" options, and a "Customize" option to choose each category, in compliance with CNIL recommendations (Délibération n° 2020-091, updated 2022). You can change your preferences at any time by clicking the "Cookie preferences" link in the footer. Your choice is kept for 12 months, after which the consent banner will reappear to request your preferences again. The banner also appears once more when a new category is added, so that you can choose for it.
4.2 Browser Settings
Most browsers allow you to control cookies through their settings. You can typically find these options in the "Privacy" or "Security" section of your browser settings. Note that blocking all cookies may affect the functionality of the Service.
4.3 Opt-Out Links
For specific third-party analytics services, you can opt out using their dedicated opt-out tools. Links to these tools are provided in the relevant service's privacy policy.
5. Do Not Track (DNT)
Some browsers offer a "Do Not Track" (DNT) signal. There is currently no universally accepted standard for how websites should respond to DNT signals. TribuShare relies on the cookie consent mechanism described in Section 4 to manage your tracking preferences. If you wish to limit non-essential tracking, please use the cookie consent banner or the "Cookie preferences" link in the footer.
6. Changes to This Cookie Policy
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If we make significant changes to how we use cookies, we will notify you through the Service or via email at least 30 days before the changes take effect.
7. Contact Us
If you have any questions about our use of cookies, please contact us:
- Email: privacy@tribushare.com
- Mailing address: SYLOE GROUP, SAS, SIREN 898 633 409, 1 rue Albert Camus, 95130 Le Plessis-Bouchard, France
For full details on how we collect, process, and protect your personal data, including your rights under GDPR (access, rectification, erasure, portability, objection), please see our Privacy Policy. To exercise any data subject right, contact: privacy@tribushare.com.