Privacy Policy

Effective date: 2026-05-02 · Last updated: 2026-05-02

Controller Identity

CES operates this website at ces.sh. Contact: hello@ces.sh

Data We Collect

Data	Source	Purpose
Email address, name, billing country	Stripe (at purchase)	Fulfillment, receipt delivery
Page views, IP address, browser	Analytics (if enabled)	Product improvement

We never see or store your payment card number. Stripe processes all card data under PCI-DSS Level 1 certification. See Stripe's privacy policy.

This product is not directed at individuals under 16.

Legal Basis (GDPR Article 6)

Contract performance (Art. 6(1)(b)) — processing your email and name to deliver the product and send your receipt.
Legitimate interests (Art. 6(1)(f)) — fraud prevention, site security, aggregate analytics.
Consent (Art. 6(1)(a)) — for any optional marketing emails. You may opt in at checkout and unsubscribe at any time.

Data Retention

Purchase records: 7 years (tax and accounting obligations)
Analytics data: 13 months maximum
Marketing email list: until you unsubscribe

Third Parties

Stripe, Inc. — payment processing
Analytics provider (if used) — aggregate page-level metrics only

We do not sell personal information to any third party.

International Data Transfers

Stripe's EU-US data transfers are covered by Standard Contractual Clauses (SCCs). Where adequacy decisions apply, we rely on those. Your data is processed in accordance with GDPR requirements regardless of where our processors are located.

Your Rights

GDPR (EU/EEA/UK residents): You have the right to access, rectify, erase, port, restrict processing of, or object to processing of your personal data. We will respond within 30 days. Contact: hello@ces.sh

CCPA/CPRA (California residents): You have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. Contact: hello@ces.sh

Policy Updates

If we make material changes to this policy, we will notify you via email (if we have your address) at least 14 days before the change takes effect. The effective date at the top of this page will be updated.

Contact

For privacy-related requests: hello@ces.sh