Privacy Policy
Last updated: July 1, 2026
1. Introduction
Celestial Textures (operated by Orestis Pefanis Ioannidis), is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Greek/EU data protection law.
2. Data Controller
Celestial Textures (operated by Orestis Pefanis Ioannidis)
Website: https://www.celestialtextures.com
Email:
3. What Data We Collect
3.1 Data you provide directly
All purchase and payment data is collected and processed by Paddle (our Merchant of Record). We may receive from Paddle:
- Your name and email address (for order confirmation and support)
- Your country (for license management)
3.2 Data collected automatically
When you visit our Site, our hosting provider and self-hosted analytics may collect technical usage data (see §3.5 and §8.3). We do not use this to build marketing profiles or sell data to advertisers.
3.3 Data from third parties
Paddle shares minimal order information with us (name, email, country, order ID) necessary for license delivery and customer support.
3.4 Software license activation (our products)
When you activate, verify, or deactivate a license in our software (for example Quick Tray) while online, our license servers may receive:
- Your license key and product code
- A one-way device identifier derived from your computer (to bind the license to your device)
- Your computer name as reported by the operating system
- Software name, version, and platform (e.g. macOS/Windows)
- Date and time of the activation or verification request
We do not use this to build a marketing profile. We use it to deliver and manage your license, limit activations per purchase, and prevent fraud and unauthorized copying (including piracy). The trial period, when offered, is managed on your device until you choose to activate online; we do not receive trial timing unless you activate.
3.5 Website analytics (self-hosted)
We operate self-hosted web analytics on our own server (not third-party advertising analytics such as Google Analytics). Depending on your visit and our settings, we may collect:
- Pages viewed and visit timestamps
- Approximate country (derived from anonymized network data; country-level only)
- Referring website URL and campaign tags (UTM parameters) when present in the link you followed
- Browser, operating system, and device type
- Internal site search terms when you use site search
- URLs that returned a not-found (404) response
- Outbound link clicks and selected on-page interactions
IP addresses are hashed; we do not store full IP addresses. Analytics uses cookieless, anonymized session identifiers by default. Full details, retention, and your choices are in §8.3.
4. How We Use Your Data
- Delivering your purchased Product (license keys, download links)
- Activating, verifying, and managing software licenses
- Preventing unauthorized use, license abuse, and piracy
- Providing customer support
- Sending transactional emails related to your purchase
- Improving our Products and Site using anonymised analytics data (see §3.5 and §8.3)
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Legal Basis for Processing (GDPR)
- Contractual necessity (Art. 6(1)(b) GDPR): to fulfil your purchase and deliver your Product, and to provide license activation you request
- Legitimate interests (Art. 6(1)(f) GDPR): to maintain and improve our Products, secure our services, manage license entitlements, prevent fraud and unauthorized copying, and operate privacy-friendly self-hosted website analytics, balanced against your rights
- Legal obligation (Art. 6(1)(c) GDPR): to comply with applicable tax and accounting obligations
6. Data Retention
We retain your personal data only for as long as necessary, and no longer than required by applicable law (e.g. tax records retained for the legally required period under Greek law). License and activation records are kept while your license is active and for a reasonable period afterward for support, disputes, and fraud prevention.
Self-hosted website analytics data is automatically deleted after 90 days (see §8.3).
7. Third-Party Services
Paddle (Payment Processing): All purchases are processed by Paddle.com. Please review Paddle's Privacy Policy at paddle.com/legal/privacy.
Hosting: This Site is hosted by DreamHost (dreamhost.com).
YouTube (Embedded videos): Tutorial and product pages may show videos hosted on YouTube (Google). When you choose to play a video, or when a product page loads an embedded player, YouTube/Google may receive technical data (such as IP address) and may set cookies. See Google's Privacy Policy at policies.google.com/privacy.
8. Cookies
Our Site uses cookies and similar technologies — small text files stored on your device so we can deliver pages correctly, keep you signed in, remember cart contents, and protect downloads. Similar technologies include local storage and session storage.
8.1 Strictly necessary (essential)
These are required for the Site to function. Without them, login, the software store cart, free product claims, and secure downloads cannot work properly.
- Joomla session — maintains your login state and security tokens
- CT Store cart — remembers items in your cart during checkout
- CSRF / form tokens — protect forms from abuse
8.2 Functional
These remember choices you make (such as language or display preferences) where the Site offers such features. They are optional.
8.3 Analytics
We operate self-hosted web analytics on our server (CT Analytics). We do not use third-party advertising or remarketing cookies. Analytics data stays on our infrastructure; it is not sold to data brokers.
We may collect: pages viewed and visit timestamps; approximate country (country-level only, from anonymized network data); referring website URL; campaign tags (UTM) when present in the URL; browser, operating system, and device type; screen resolution when enabled; internal site search terms; URLs that returned a not-found (404) response; and outbound link clicks or selected on-page interactions.
IP addresses are hashed; we do not store full IP addresses. By default, analytics uses cookieless, anonymized session identifiers — we do not set a persistent analytics cookie unless you opt in where we use consent-based analytics.
Raw analytics data is automatically deleted after 90 days. We honour Do Not Track when your browser sends it.
If we change analytics settings (for example to require cookie consent before non-essential tracking), we will update this section. Suggested disclosure text for our current configuration is also available in Components → CT Analytics → Privacy in our site administration.
8.4 Third-party cookies
When you complete a paid purchase, Paddle (our Merchant of Record) may set cookies during checkout on their payment pages. Please see Paddle's Privacy Policy for details.
When you play an embedded YouTube video, Google/YouTube may set cookies on your device. We use YouTube's privacy-enhanced player where possible. Thumbnail images may be loaded from YouTube's servers when you view pages that list videos.
8.5 Managing cookies
You can control cookies through your browser settings. If you block essential cookies, parts of the Site (login, store, downloads) may not work.
We do not sell cookie data to third parties or link cookie data to marketing lists without your consent.
8.6 Legal basis for cookies (GDPR)
Essential cookies are used based on legitimate interests and contractual necessity (Art. 6(1)(b) and (f) GDPR). Any non-essential cookies will only be used with your consent (Art. 6(1)(a) GDPR) where required by law.
9. Your Rights (GDPR)
As a data subject under GDPR, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. You also have the right to lodge a complaint with the Greek Data Protection Authority (ΑΠΔΠΧ) at www.dpa.gr.
9.1 Account deletion
If you have a Celestial Textures website account, you can request deletion from your profile page (Edit profile → Request account deletion). We will email you a confirmation link to verify your request. After you confirm, our team reviews and completes deletion, usually within a reasonable timeframe. Store order records required for tax and accounting may be retained in anonymised form (without your name or email). Newsletter subscriptions are removed and queued for deletion from our email provider (Brevo) where applicable.
To exercise any of these rights, contact us at:
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data. All data transmitted to and from our Site and license services is encrypted via SSL/HTTPS where applicable.
11. Children's Privacy
Our Products and Site are not directed at children under the age of 16. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.
13. Contact
Celestial Textures
Email:
Website: https://www.celestialtextures.com