Cookie Policy
Last updated: October 2026
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the website recognize your device on subsequent visits, remember your preferences, and provide a better user experience. Similar technologies include web beacons, pixels, and local storage.
2. How We Use Cookies
TribuShare uses cookies and similar technologies for the following purposes, on tribushare.com, on film pages and company pages, and on storefronts.
2.1 Strictly Necessary Cookies
These cookies are essential for the operation of the Service. They enable core functionality such as authentication, security, and session management. Without these cookies, the Service cannot function properly. These cookies do not require your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookie__Secure-better-auth.session_token | ProviderTribuShare | PurposeKeeps you signed in | Duration60 days, renewed while you use the Service |
| Cookie__Secure-better-auth.session_data | ProviderTribuShare | PurposeShort-lived copy of your session, to avoid a lookup on every page | Duration5 minutes |
| Cookie__Secure-better-auth.dont_remember | ProviderTribuShare | PurposeSigns you out when you close the browser, if you asked not to be remembered | DurationUntil you close your browser |
| Cookiebetter-auth.last_used_login_method | ProviderTribuShare | PurposeRemembers how you last signed in (email code or Google) | Duration30 days |
| Cookiecookie_consent | ProviderTribuShare | PurposeStores your cookie preferences | Duration1 year |
| Cookie__stripe_mid, __stripe_sid | ProviderStripe | PurposeFraud prevention, set by Stripe.js on film pages (which include the checkout), during film onboarding and in the dashboard | Duration1 year and 30 minutes |
| Cookie__cf_bm, cf_clearance | ProviderCloudflare | PurposeBot management and security challenge, when Cloudflare applies one | DurationUp to 30 minutes |
TribuShare also stores, in your browser's local or session storage, a random device identifier sent with video uploads, the state of the dashboard assistant, and technical flags used to recover from a failed page load. They are used only for these features and are strictly necessary for them.
2.2 Analytics Cookies
These cookies help us understand how visitors interact with the Service by collecting information about page visits, traffic sources, and user behavior. This data is used to improve the Service. Analytics cookies are only set with your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookieph_*_posthog | ProviderPostHog (EU cloud) | PurposeProduct analytics: page views, feature usage, and linking your visits to your account when you are signed in | Duration1 year |
| Cookietribu_attrib | ProviderTribuShare | PurposeRemembers the campaign link or ad that brought you (details below) | Duration30 days, renewed at each visit |
The tribu_attrib cookie keeps what the link you arrived from says about its campaign: its UTM tags (utm_source, utm_medium, utm_campaign, utm_content and utm_term) and the name of the ad click id it carried (gclid, gbraid or wbraid for Google, msclkid for Microsoft, ttclid for TikTok, fbclid for Meta), with the page you arrived on and when you arrived. It also keeps the address of the website you came from, even when the link carried no campaign. The value of that click id is kept only if you also accept Advertising cookies. When you arrive from a link in one of our emails, it also keeps your email address, so that your visits are linked to it in our analytics. It is used to count a purchase, a follow, a sign-up or a film you add from Vimeo for the campaign or the website that brought you. If you decline or withdraw analytics consent, TribuShare deletes this cookie.
Until you accept analytics cookies, nothing is stored in your browser: the same details are kept only in the memory of the open tab, and are lost when you close or reload it. They are then used only to count a purchase, a follow or a film you add from Vimeo during that visit for the campaign, never with your email address. If you accept analytics cookies in the meantime, they move to the tribu_attrib cookie on the next page you open.
With your consent, PostHog also records how you use the pages where a film is published (/publish) and the film catalog, film pages, filmmaker pages, watch and checkout pages, and the For filmmakers, For distributors and Pricing pages: what the page displays, your clicks, scrolling and mouse movements. What you type in form fields is masked, and the payment card fields, which Stripe displays in its own frame, are not recorded. Recording stops when you leave these pages or withdraw your consent.
Until you answer the cookie banner, PostHog sets no cookie, and the analytics events of your visit are held in your browser; they are sent when you answer, or when you leave the page. When you decline analytics or leave without answering, PostHog runs in cookieless mode: it still counts page views and feature usage, but stores nothing on your device and does not link your visits together. Separately, TribuShare measures page views itself without any cookie, using a daily rotating hash of your IP address and browser, and records the steps a Creator reaches when publishing a film from its own servers, as described in the Privacy Policy.
2.3 Functional Cookies
These cookies remember display settings, the last organization and film you opened in the dashboard, and your connection speed for video playback. They are only set with your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookietribushare.last-org, tribushare.last-context.* | ProviderTribuShare | PurposeReopens the dashboard on the organization and film you last worked on | Duration1 year |
| Cookiesidebar_state | ProviderTribuShare | PurposeDashboard sidebar collapsed or expanded | Duration7 days |
| Cookietribushare_bw | ProviderTribuShare | PurposeRemembers your measured connection speed to pick the starting video quality | Duration1 year |
2.4 Share & Earn Cookies
These cookies remember the Share & Earn or share link you arrived from, so the person who shared it can earn credit if you buy or rent the film. They are only set with your consent; without it, the link you arrived from is not remembered.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookietribu_ref | ProviderTribuShare | PurposeShare & Earn attribution | Duration30 days |
| Cookietribu_s | ProviderTribuShare | PurposeRemembers the share link you opened during your visit | DurationUntil you close your browser |
2.5 Advertising Cookies
A Creator may add a Meta Pixel or a Google tag to one of its film pages or to its storefront, to measure visits, sign-ups and purchases for its advertising. These tags run only on that film page, or on the pages of that storefront (its home page, its other pages and resources, and its account, purchase, gift, library, legal, unsubscribe and watch pages), and only with your consent: they are loaded once you accept Advertising cookies. If you withdraw that consent, TribuShare tells the tags that consent is revoked and expires the cookies below. The same consent decides whether TribuShare keeps the click id of the ad you arrived from (Section 2.2).
If the Creator has also connected the Meta Conversions API, TribuShare sends your purchases and sign-ups on that film page or storefront to Meta from its own servers as well, with the values of the _fbp and _fbc cookies below. This also happens only with your Advertising consent. The Privacy Policy lists what is sent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| Cookie_fbp, _fbc | ProviderMeta | PurposeMeta Pixel: measuring visits, sign-ups and purchases for advertising | DurationSet by Meta, 90 days for _fbp |
| Cookie_ga, _ga_<id>, _gid, _gcl_* | ProviderGoogle | PurposeGoogle tag: measuring visits, sign-ups and purchases for advertising | DurationSet by Google, up to 2 years for _ga |
3. Third-Party Cookies
Third-party services that may set cookies on your device:
- Stripe: payment processing. Cookies necessary for secure payment transactions and fraud prevention, set by Stripe.js on film pages (which include the checkout), during film onboarding and in the dashboard (where you manage your plan and card). Stripe acts as an independent data controller for payment data. See: stripe.com/privacy
- Cloudflare: security and CDN. Strictly necessary cookies for DDoS protection and bot management. See: cloudflare.com/privacypolicy
- PostHog (EU cloud): product analytics and, on some pages, session recordings (Section 2.2). Analytics cookies and recordings only with your consent. See: posthog.com/privacy
- Sentry: error monitoring. Only if you accept analytics cookies, Sentry keeps in your browser's session storage a replay of the last moments of the page, with its text and media masked, and sends it with the error report when an error occurs. See: sentry.io/privacy
- Meta and Google: a Creator may add a Meta Pixel or a Google tag to one of its film pages or to its storefront. These tags load only if you accept Advertising cookies (Section 2.5); Meta or Google then set their own cookies on that film page or on the pages of that storefront. See: facebook.com/privacy/policy and policies.google.com/privacy
TribuShare does not add advertising cookies of its own on the Service.
4. Managing Your Cookie Preferences
You can manage your cookie preferences in several ways:
4.1 Cookie Consent Banner
When you first visit TribuShare, a cookie consent banner will appear, providing equally prominent "Accept All" and "Reject All" options, and a "Customize" option to choose each category, in compliance with CNIL recommendations (Délibération n° 2020-091, updated 2022). You can change your preferences at any time by clicking the "Cookie preferences" link in the footer. Your choice is kept for 12 months, after which the consent banner will reappear to request your preferences again. The banner also appears once more when a new category is added, so that you can choose for it.
4.2 Browser Settings
Most browsers allow you to control cookies through their settings. You can typically find these options in the "Privacy" or "Security" section of your browser settings. Note that blocking all cookies may affect the functionality of the Service.
4.3 Opt-Out Links
For specific third-party analytics services, you can opt out using their dedicated opt-out tools. Links to these tools are provided in the relevant service's privacy policy.
5. Do Not Track (DNT)
Some browsers offer a "Do Not Track" (DNT) signal. There is currently no universally accepted standard for how websites should respond to DNT signals. TribuShare relies on the cookie consent mechanism described in Section 4 to manage your tracking preferences. If you wish to limit non-essential tracking, please use the cookie consent banner or the "Cookie preferences" link in the footer.
6. Changes to This Cookie Policy
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If we make significant changes to how we use cookies, we will notify you through the Service or via email at least 30 days before the changes take effect.
7. Contact Us
If you have any questions about our use of cookies, please contact us:
- Email: privacy@tribushare.com
- Mailing address: SYLOE GROUP, SAS, SIREN 898 633 409, 1 rue Albert Camus, 95130 Le Plessis-Bouchard, France
For full details on how we collect, process, and protect your personal data, including your rights under GDPR (access, rectification, erasure, portability, objection), please see our Privacy Policy. To exercise any data subject right, contact: privacy@tribushare.com.