Privacy Policy
Effective from
Translation provided for information only; the French version is the only authoritative one. Read the French version
This policy describes how Blisterr SAS collects, uses and protects the personal data of platform users. It is drawn up with regard to Regulation (EU) 2016/679 of the European Parliament (GDPR), in particular articles 12 to 14, and the French Data Protection Act of 6 January 1978, as amended.
1. Data controller
The data controller is the company BLISTERR, a French SAS with share capital of €1,000, RCS Bayonne 918 924 556, whose registered office is at 3 rue Denis Etcheverry, 64100 Bayonne, France.
Contact for any question about your personal data: privacy@blisterr.com, or by post to the registered office address.
When you buy, the seller receives the data needed to fulfil the order (name, delivery address or pickup point and, where applicable, phone number). The seller processes it to carry out their sale, as a data controller separate from Blisterr.
2. Data collected
Data you provide:
- identity and account: surname, first name, username, date of birth, email address, phone number (verified by a code sent by SMS);
- delivery addresses, pickup points, payment method (the card is entered with Stripe: Blisterr stores no card number);
- for sellers: status (private or professional), SIRET, legal form, VAT regime, categories, social network links, introduction video, tax identification number (optional). Identity documents for verification (KYC) are collected by Stripe Connect; Blisterr receives the result;
- content: peeks, lives (audio and video stream, chat), comments, private messages, reviews, reports, messages sent to support.
Data generated by using the service:
- transactions: orders, payments, wallet, invoices, debts, strikes, referrals, giveaway entries;
- interactions: views, likes, bids, purchases, hidden items and recent searches, used to personalise the feed (article 6) and for search;
- technical data: IP address, device type, browser, operating system, connection logs, push notification token;
- audience measurement data (page views, interactions, masked session recordings, errors, campaign parameters), only after your consent (see the Cookie Policy);
- where applicable, geolocation data, only with your explicit consent and according to your device settings.
3. Purposes, legal bases and retention periods
| Purpose | Legal basis | Retention period |
|---|---|---|
| Creating and managing your account, authenticating you (login code by email or SMS) | Performance of the contract | For as long as the account is used; deletion or anonymisation 2 years after the last interaction on an inactive account |
| Carrying out sales: orders, payments, wallet, delivery, referral, giveaways, support | Performance of the contract | Duration of the relationship, then the legal periods below |
| Invoicing, accounting and tax obligations, including platform obligations (DAC7) | Legal obligation | 10 years from the transaction for transaction data and invoices |
| Seller identity verification, fraud and money laundering prevention | Legal obligation (KYC) and legitimate interest (fraud prevention) | 5 years after the end of the relationship for KYC data |
| Platform security, abuse prevention, logging, tracking of technical errors in the API | Legitimate interest | 12 months for technical and security logs |
| Content moderation, handling of reports and appeals (DSA) | Legal obligation and legitimate interest | The time needed for review, then the applicable limitation period in case of litigation |
| Messaging, comments, reviews, live chat | Performance of the contract | While the content is published, then deletion or anonymisation when the account is closed, unless the law requires otherwise |
| Lives: live broadcast, recording and replays | Performance of the contract | The streaming server is destroyed when the live ends; replays are kept for as long as the shop makes them available |
| Requests sent to support (contact form, email) | Performance of the contract and legitimate interest (handling your request) | The time needed to handle the request, then the applicable limitation period in case of litigation |
| Search: history of your recent searches and query logs | Legitimate interest (providing search and improving its relevance) | History: 30 days; query logs: 7 days; clicks on results: 90 days |
| Feed personalisation | Legitimate interest (you may object: article 7) | For as long as the account is used |
| Transactional notifications (email, push) | Performance of the contract | For as long as the account is used |
| Marketing communications, where applicable | Consent, which can be withdrawn at any time | Until consent is withdrawn |
| Audience measurement, masked session recording and error tracking (PostHog) | Consent | Cookie: 12 months maximum; data: 25 months maximum |
| Geolocation, where applicable | Consent | Until consent is withdrawn |
At the end of these periods, data is deleted or anonymised. Cookies and trackers are detailed in the Cookie Policy.
4. Recipients and processors
Your data is accessible to authorised Blisterr teams, within the limits of their duties, and to the following providers, bound to Blisterr by confidentiality and security undertakings compliant with the GDPR. Unless otherwise stated, they act as processors.
| Provider (country) | Role | Data concerned | Transfer outside the EU |
|---|---|---|---|
| OVH SAS (France) | Hosting of production: API, database, back office | All service data | No |
| Hetzner Online GmbH (Germany) | Temporary live servers, destroyed at the end of each live | Audio and video stream of lives | No |
| BunnyWay d.o.o. (Bunny.net) (Slovenia) | Storage and delivery of media, replays, PDF invoices | Photos, videos, invoices | No |
| Cloudflare, Inc. (United States) | Hosting of the marketing site, CDN, attack protection, DNS; Turnstile (contact form anti-spam); Stream (demo video) | IP address, technical browser signals | Yes (United States) |
| Stripe Payments Europe, Ltd (Ireland) | Card payments, Stripe Connect accounts and seller identity verification | Payment data, sellers’ identity | Possible to Stripe, Inc. (United States) |
| Brevo (France) | Transactional and login emails; receipt of support emails | Email, name, message content | No |
| SMS Partner (France) | Sending login-code SMS | Phone number | No |
| Google LLC (United States): Firebase Cloud Messaging | Push notifications | Device token, notification content | Yes (United States) |
| Sendcloud B.V. (Netherlands) | Rates, shipping labels, pickup points and tracking | Recipient’s name, address, phone number, parcel weight | No |
| Carriers: La Poste / Colissimo, Mondial Relay, Chronopost (France) | Parcel carriage and tracking (data controllers for delivery) | Recipient’s name, address, phone number | No |
| OpenAI (United States) | Automated analysis of text for moderation (article 6) | Text of descriptions, comments, private messages, reviews and chat messages | Yes (United States) |
| Google LLC (United States): Perspective API | Moderation fallback service, when enabled | Text submitted for moderation | Yes (United States) |
| Cohere Inc. (Canada) | Numerical representations (embeddings) for search | Text of items and search queries | Yes (Canada) |
| PostHog (European Union, Frankfurt) | Audience measurement, masked session recording and error tracking for the site and the application, only after your consent; tracking of technical errors in the API | Page views, interactions, masked recordings, errors; for the API, technical errors linked to the account concerned | No (hosting in the EU) |
| Pennylane (France) | Electronic invoicing | Names, addresses and amounts on invoices | No |
| Mapbox (United States) | Fallback address geocoding, when enabled | Addresses entered | Yes (United States) |
| Discord (United States) | Community, support on the official server and operational alerts (no banking data) | Discord username, technical alerts | Yes (United States) |
| French public APIs (api-adresse.data.gouv.fr, recherche-entreprises.api.gouv.fr) | Address autocompletion and SIRET search | Address entered, SIRET | No |
Your data may also be disclosed to administrative and judicial authorities when the law requires it. In case of restructuring (merger, acquisition, sale of business), it may be transferred to the acquirer, bound by the same obligations. No personal data is sold.
5. Transfers outside the European Union
Platform data is hosted in France (OVH). Lives are streamed from temporary servers hosted in Germany (Hetzner).
When a provider is established outside the European Economic Area (United States, Canada), the transfer is covered by one of the following safeguards: an adequacy decision of the European Commission (Canada, for the organisations it covers), the European Commission’s standard contractual clauses (SCCs), or the Data Privacy Framework (DPF) where the provider is certified, supplemented where necessary by technical measures (encryption in transit). You can obtain a copy of the safeguards applicable to a provider by writing to privacy@blisterr.com.
6. Automated decisions and profiling
Automated moderation. Listings, comments, private messages, reviews and live chat messages are analysed automatically as soon as they are published, first by a dictionary of prohibited terms and then by an artificial intelligence service operated by a third-party provider (OpenAI, with a fallback service). The analysis covers text. Detected content may be flagged to the team or hidden automatically; the team reviews content that is reported or considered suspicious.
Automatic measures. Some measures are applied without human intervention: the strike for non-payment of a won auction, the unpublishing of an item or the hiding of a comment from three distinct reports. You can contest them and have them re-examined by a member of the team by writing to support@blisterr.com (article 18 of the Terms).
Personalisation. The personalised feed selection relies on a taste profile built from your interactions. It has no legal effect on you.
7. Your rights
In accordance with articles 15 to 22 of the GDPR, you have the following rights:
- access to your data and obtaining a copy;
- rectification of inaccurate or incomplete information;
- erasure, in the cases provided for by law;
- restriction of processing;
- portability, to receive your data in a structured format or transmit it to another operator;
- objection, in particular to feed personalisation and direct marketing;
- withdrawal of consent at any time, without retroactive effect;
- setting directives on what happens to your data after your death.
To exercise these rights, write to privacy@blisterr.com or by post to BLISTERR, 3 rue Denis Etcheverry, 64100 Bayonne, France. We reply within one month at most, extended by two months if the request is complex. We may ask for proof of identity if there is reasonable doubt.
You also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy, 75007 Paris, cnil.fr.
8. Minors
Blisterr is reserved for adults (18 years or older). We do not knowingly collect data from minors. If we find that an account belongs to a minor, we delete it along with the associated data. If you think a minor has created an account, write to privacy@blisterr.com.
9. Security
Blisterr implements appropriate technical and organisational measures to protect your data, it being understood that no security measure offers absolute protection:
- access to data restricted to authorised persons, strictly within the limits of their duties;
- TLS encryption of communications;
- logging of sensitive operations;
- backups;
- incident management, with notification to the CNIL within 72 hours and information to the persons concerned in case of a data breach presenting a risk.
The confidentiality obligation may be lifted when the data has entered the public domain without any breach by Blisterr, when you expressly consent, or when the law, a court decision or a competent authority so requires.
10. Cookies and trackers
Blisterr uses cookies and similar technologies to operate the platform and, with your consent only, to measure audience with PostHog (audience measurement, masked session recording and error tracking). The trackers, their purposes, their durations and consent management are detailed in the Cookie Policy. Blisterr respects the Do Not Track signal sent by your browser.
11. Changes
This policy may be amended. The applicable version is the one in force on the date of the processing concerned; the effective date appears at the top of the document. Substantial changes are notified by email or via the platform.
12. Contact
- GDPR email: privacy@blisterr.com
- Postal address: BLISTERR, 3 rue Denis Etcheverry, 64100 Bayonne, France.