Privacy and cookie policy
Last updated: 15 October 2026
This policy explains what data Cubikmarket collects, why, for how long and who receives it. The data controller is the site’s publisher: Valentin Le Tallec,[À COMPLÉTER : adresse postale complète] (see the legal notice). For any question: contact@cubikmarket.com.
Cubikmarket does not sell your data, does not show advertising and does not use any audience-tracking or advertising cookies.
1. Data collected
- Account: username, email address, password (stored only as a salted hash, never in clear text), avatar, language, account creation date, email verification status.
- Sign-in with Discord or Google: your identifier with that service, and the email, name and avatar it sends us. We never receive your Discord or Google password.
- Purchases: orders (resources, licences, amounts, status, dates, date of your agreement to immediate delivery), library of purchased resources, cart, favourites, creators followed.
- Payment: handled entirely by Stripe. We only keep the Stripe payment identifiers, never your card number.
- Creators: store name, presentation, country, links, avatar and banner, published resources and files, sales and earnings, Stripe connected account identifier. Identity checks for payouts are carried out by Stripe.
- Content you write: reviews, replies, messages exchanged with creators or buyers, and their automatic translations.
- Security: session identifier (stored in hashed form), single-use links (email verification, password reset), IP address used briefly to limit repeated login and sign-up attempts, and technical logs of the hosting provider.
2. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, signing in | Performance of the contract (terms of use) |
| Selling resources, payment, download, payouts to creators | Performance of the contract |
| Messaging, reviews, favourites, following creators | Performance of the contract |
| Automatic translation of listings, reviews and messages | Legitimate interest (allowing French and English speakers to understand each other) |
| Service emails (verification, password, orders) | Performance of the contract |
| Security, fraud prevention, abuse limitation | Legitimate interest |
| Accounting, tax obligations (including reporting of creators’ sales) | Legal obligation |
| Handling reports and disputes | Legal obligation and legitimate interest |
Cubikmarket does not send newsletters or marketing emails.
3. Retention periods
- Account, profile, favourites, messages and reviews: as long as the account is open, then deleted when it is closed (published reviews may be kept anonymised).
- Orders and accounting records: 10 years (French Commercial Code), then deleted.
- Sessions: 30 days, extended while you use the site. Verification and reset links: until they expire.
- Automatic translations: kept as long as the original text exists.
- Hosting technical logs: a few days.
4. Recipients and processors
Your data is accessible only to the Cubikmarket team and to the following service providers, strictly for what they do for us:
- Cloudflare (United States): hosting of the site, database and files, security, and translation when Workers AI is used.
- Stripe (Ireland and United States): payments, creator identity checks and payouts.
- Brevo (France): sending service emails.
- Discord and Google: only if you choose to sign in with them.
- Translation provider, depending on configuration: Cloudflare Workers AI, DeepL (Germany) or Google Cloud Translation. Only the text to be translated is sent, without your name or email.
Creators you buy from see your username and the content of your messages and reviews; they do not receive your email address. Some of these providers are located outside the European Union. These transfers are covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.
5. Cookies
Cubikmarket only uses cookies that are strictly necessary for the site to work. They do not require consent, which is why no cookie banner is shown.
| Cookie | Purpose | Duration |
|---|---|---|
| session | Keeps you signed in (secure, inaccessible to scripts) | 30 days, extended while you use the site |
| lang | Remembers your language (French or English) | 1 year |
| oauth_state, oauth_verifier, oauth_next, oauth_lang | Secure sign-in with Discord or Google | 10 minutes |
When you click to view a 3D preview, the viewer is loaded from the site itself: no third-party service is contacted. Avatars of accounts created with Discord or Google are displayed from those services’ servers, which therefore receive your IP address when they are shown.
6. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. You can also give instructions on what happens to your data after your death. To exercise these rights, write to contact@cubikmarket.com from the address linked to your account. We reply within one month.
You can edit most of your information yourself in your account settings. If you believe your rights are not being respected, you can lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority, or with the authority of the country where you live.
7. Security
Passwords are hashed, connections are encrypted (HTTPS), purchased files are never accessible without being signed in to an account that owns them, and repeated login attempts are limited. No system is infallible: if a breach affecting your data occurs, you will be informed under the conditions laid down by law.
8. Minors
The site is open to minors. A minor under 15 must have permission from a parent or guardian to create an account. Parents can ask us to delete their child’s account at contact@cubikmarket.com.