Privacy Policy

Last updated : 09/10/2026

This policy describes how Lilian Barrancos EI ("TVEC", "we") collects and processes your personal data when you use theviraleditcontest.com, in accordance with Regulation (EU) 2016/679 (GDPR) and French data protection law.

1. Data controller

Lilian Barrancos EI, 47 rue Vivienne, 75002 Paris, SIRET 105 331 060 00019. Contact : [email protected]

2. Data collected and purposes

  • Sign-up / account : email, username, hashed password, role (editor/sponsor) — legal basis: contract performance. For withdrawals, you enter an email address linked to your PayPal account in your TVEC wallet.
  • Sign in with Google : if you choose this method, Google sends Firebase Authentication your Google account identifier, email address, display name and, if available, profile photo. TVEC uses this information to authenticate you, create your TVEC account, display your name and avatar, and send service-related communications. Your name and avatar may appear on your public profile. TVEC does not request access to your Gmail messages, Google Drive or other Google files. Your Google password is not shared with TVEC. Legal basis: contract performance.
  • Linked TikTok account : public TikTok handle, public views/likes of submitted videos — legal basis: contract performance.
  • Payments : PayPal withdrawal email address, transaction history and invoices, and identifiers of former Stripe payout accounts — legal basis: legal obligation (accounting) and contract performance. New withdrawals are PayPal-only. Bank details and verification documents for former accounts are stored directly by Stripe, never by TVEC.
  • Communications : transactional emails (contests, payments, security) and preferences — legal basis: contract performance and legitimate interest.
  • Audience measurement, technical and security logs : IP address, user-agent, device type, requested page, random session identifier, visit timestamps and application errors (Sentry) — purposes: internal traffic statistics, proper operation, security and anti-fraud; legal basis: legitimate interest.
  • Cookies : see dedicated cookie policy — legal basis: consent (except strictly necessary cookies).

3. Retention periods

  • User account : until account deletion or 3 years of inactivity.
  • Invoices and accounting data : 10 years (legal obligation, Art. L.123-22 French Commercial Code).
  • Technical online presence : 24 hours.
  • Access logs with IP address and Sentry / technical logs : 30 days. Aggregated visit statistics cannot identify you on their own.
  • Cookies : maximum 13 months (CNIL recommendation).

4. Subprocessors

To operate, TVEC relies on the following subprocessors, all contractually bound to GDPR compliance:

  • Google Firebase (Google Ireland Ltd., Ireland) — authentication, database, Cloud Functions hosting.
  • Stripe (Stripe Payments Europe, Ltd., Ireland) — sponsor payment processing and management of former bank payout accounts.
  • PayPal — processing beneficiary withdrawals; the PayPal email address and information needed for payment are shared with PayPal.
  • Resend (USA, Standard Contractual Clauses) — transactional email delivery.
  • Apify (Czech Republic) — retrieval of public TikTok statistics.
  • Sentry (Functional Software Inc., Allemagne / DE region) — error monitoring.
  • Hostinger (Cyprus) — web hosting.

5. Transfers outside the EU

Some subprocessors (Resend, Sentry) may process data in the United States. These transfers are covered by the European Commission's Standard Contractual Clauses, guaranteeing a level of protection equivalent to GDPR.

6. Your rights

You have the following rights at any time: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. To exercise them, contact us at [email protected].

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

We respond to any request within one month (Art. 12 GDPR), free of charge, and may ask for proof of identity. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Providing the data marked as necessary is a condition for using the service; without it, certain features cannot be accessed.

7. Security

Passwords are hashed using Firebase Auth standards. Communications are encrypted with TLS 1.2+. Two-factor email authentication (2FA) is available and required for sensitive actions. Data access is strictly controlled by restrictive Firestore rules.

8. Recipients and public visibility

By the nature of the service, some data is visible to other users: your username, TikTok handle, submitted edits, views and ranking are displayed publicly (contest pages, leaderboards). A contest's sponsors and jurors access the entries and the information needed for scoring. Apart from the subprocessors listed in § 4 and these recipients, your data is neither sold nor transferred to third parties.

9. Source of the data

In addition to the data you provide directly, we retrieve public TikTok statistics (views, likes) relating to the videos you submit, via our subprocessor Apify, in order to rank contests and prevent fraud. This data comes from publicly accessible sources (Art. 14 GDPR).

10. Automated decisions and anti-fraud

TVEC uses automated checks to verify views and detect fraud (view buying, multi-accounts, stolen content). A suspicion of fraud may lead to disqualification of an edit or suspension of an account. Where a decision is based significantly on automated processing, you have the right to obtain human intervention, express your point of view and contest the decision by contacting us. No profiling for advertising purposes is carried out.

11. Children's data

Access to TVEC is reserved for people aged at least 13. We do not collect any date of birth: by accepting the Terms at sign-up (dedicated checkbox), the user declares and warrants they are at least 13. Users aged 13 to 17 also declare that they act with their legal guardian's consent, in accordance with the Terms. Any account we become aware of that belongs to a child under 13 is deleted.

12. International users

TVEC is established in France and applies the GDPR to all its users, wherever they reside. California residents: we do not "sell" or "share" your personal information within the meaning of the CCPA/CPRA, and you may exercise your access and deletion rights at the address above.

13. Changes to this policy

We may update this policy. The last-updated date appears at the top of the page; in the event of a material change, we will notify you by email or via the platform.