Privacy statement

The program collects no data

Celestium sends no usage data, telemetry or chart data to us or to anyone else, with one exception: if you choose the Mercator (OSM) projection in one of the two map screens in Celestium Pro, your computer requests map material for the area you view, around the place of the chart when the screen opens (see Map material). No account is needed to use the program.

All charts, people, folders and notes are stored in a file on your own machine: on Windows in Documents\Celestium, on macOS in ~/Documents/Celestium. If your Documents folder syncs with iCloud, Celestium on macOS uses ~/Library/Application Support/Celestium instead. We have no access to it.

The ephemeris data and the place database ship inside the program. Looking up a birthplace happens locally and does not travel over the internet.

Map material

The Astrocartography and Local Space screens in Celestium Pro display a world map. By default the projection is set to Flat. That map is built into the program, and Celestium then makes no connection.

Only if you choose the Mercator (OSM) projection does your computer itself fetch map pieces from the OpenStreetMap Foundation in the United Kingdom (tile.openstreetmap.org).

The OpenStreetMap Foundation then receives your IP address, the numbers of the map pieces (zoom level and position) and the program name Celestium/1.0. Nothing else from your chart is sent. From the numbers it can tell which area you are viewing; when a screen opens, that is the surroundings of the place of the chart.

Celestium (we) receives nothing from these requests. The OpenStreetMap Foundation processes them under its own privacy policy (see Recipients of your data).

Celestium keeps the map pieces it has fetched on your computer, in the tilecache folder: on Windows in %APPDATA%\Celestium\tilecache, on macOS in ~/Library/Application Support/Celestium/tilecache. You can delete that folder yourself.

Time check in the trial version

The trial version of Celestium checks the date online each time it starts. To do so it first asks the time servers ntppool.time.nl (TimeNL, SIDN Labs, the Netherlands) and ptbtime1.ptb.de (PTB, Physikalisch-Technische Bundesanstalt, Germany) for the time. If those two disagree, or one of them does not answer, it also asks ptbtime2.ptb.de, a second PTB server. The date is settled as soon as two servers agree. Such a time request contains no data from the program, but each time server does see the IP address the request comes from. Your computer makes that connection itself; we receive nothing from it. The licensed version does not run this check.

Who is responsible for your data

De Gouden Cyclus, trading as Celestium, is the controller for the personal data that we process as described in this statement. For the OpenStreetMap map pieces and the time check of the trial version, your computer makes the connection itself and we receive nothing; the OpenStreetMap Foundation and the operators of those servers process those requests under their own privacy policies. The business address, Chamber of Commerce number and VAT number appear at the bottom of this page; you can reach us by email at info@celestium.nl.

We have not appointed a data protection officer. We are not required to: our core activities do not consist of regular and systematic monitoring of people on a large scale, nor of processing special categories of personal data on a large scale.

Contacting us by email

If you send us a message, we keep that message and your email address for as long as is needed to answer your question and to handle any later questions about the same matter. The basis for this is our legitimate interest in replying to you, or the performance of the contract if your question concerns an ongoing purchase.

Ordering and paying

If you order by email, we process what you send us for that yourself: your name and email address as you give them, the country you live in, and the details of your order, such as the edition, the amount and the date. This is needed to send you a license key and to draw up a correct invoice: without this data we cannot perform the contract, and so cannot deliver a license. The basis for this is the performance of the contract.

If you order by email, you pay through Mollie, by SEPA bank transfer, iDEAL or Bancontact. Mollie processes the data needed for that payment. From Mollie we receive the data needed to match your payment to your order, such as the name of the payer and the account number, or with Bancontact the last digits of the card. We process that data on the same basis as your order. If you order through the order form on this website, you also pay through Mollie, and Mollie also gives us the country of your payment method; we keep it as VAT evidence. For each payment we record which payment provider handled it, the reference the provider gave it, the status, the amounts and the times, and also refunds and chargebacks. That data is part of our financial administration and is kept, also after we have anonymized your data. The individual notifications the payment provider sends us about a payment are deleted once the retention period of the order has passed, no later than seven days after that.

If you order through the order form on this website, we keep your name, your email address, the language you order in, the country you give, the products you order with their amounts, VAT and any discount code, and the times of ordering and payment. We also record when you agreed to the terms and made your choice about the right of withdrawal, and which version of those texts you were shown. If you order a new license, we put your name on that license as the license holder and in the email with your license key. The basis is the performance of the contract, and for the VAT data the statutory tax record-keeping duty. The order itself is kept. We remove your name from it when we anonymize your data; when that happens is set out under "Retention periods".

We do not store your IP address. With an order we do record one thing derived from it, as evidence for the country whose VAT we apply: the country Cloudflare places the address in. Cloudflare also counts, through a hash of the address that we make with a secret key and the date, how many orders arrive per IP address, so that we can slow down abuse. With a payment we also record which payment method you used (for example iDEAL or Bancontact) and, if you pay by card, the country of that card, where Mollie passes it on to us. We use this data only as additional evidence for the VAT country; the country you give yourself remains decisive. We keep it as long as the other VAT data of your order. We keep this VAT evidence until the retention period of the order has passed, and delete it no later than seven days after that.

The order form uses Cloudflare Turnstile to stop automated orders. Turnstile is loaded in your browser from Cloudflare. When the order is sent, we have Cloudflare check the result and pass your IP address along with it. The form therefore does not work without JavaScript.

To prevent the same order from being created twice, for instance if you press the button twice, we briefly keep a technical record for each order sent: a value derived from the Turnstile check, a value derived from the content of the request, the status of the processing and which order the record belongs to. Such a record expires after one day. We delete it in the first cleanup run after that; that run happens every hour.

If you use a discount code, we record with the code which order it was reserved for and when it was redeemed. The code and that data are kept for the accounting of discounts. If the code has a description, we delete it when we anonymize your data.

We keep your order and payment data and the invoice as part of our financial administration, under the statutory tax record-keeping duty. How long we keep them is set out under "Retention periods".

License and activation

If you buy a license, we keep the following with your customer data: your license key (encrypted, so that we can send it again, and as a checksum), the part of the key we show visibly, your name as the holder, how many devices the license covers, which features belong to it, when we issued it, when it was first activated (for a new license, your right of withdrawal ends at that moment, but only if you gave express prior consent to delivery within the withdrawal period, stated that you would lose your right of withdrawal, and received our confirmation of this; see the terms and conditions) and, if it happens, when and why it was revoked. Your license has no deletion period: it continues to exist, also after we have anonymized your data. We then remove your name and replace the reason for a revocation with the word "anonymized".

When you activate online, Celestium sends your license key to our server, to check that it is valid. It also sends a device ID: an identifier the program derives from your computer and your user account; the raw identifier of the computer does not leave the computer. In Celestium you find this ID in the license window, under "Device ID (for support)". It also sends the platform (for example Windows or macOS) and the version of Celestium. When it renews the license or deactivates a computer, the program sends the device ID and the version, together with the token it received at activation. No chart data is sent. In addition, the licensed version asks our license server which version is the newest each time it starts and every hour after that. That request contains no data from the program. Our server does see your IP address; we do not store it, and Cloudflare processes it as our hosting provider (see Recipients of your data). The trial version does not do this.

For each device the server keeps the device ID, which platform it runs on (for example Windows or macOS), when the device was activated, when it last made contact, and whether and when it was signed off, in the program or by us. A license covers a maximum number of devices, three by default; we need this data to enforce that number. The basis is the performance of the contract. We keep this data for as long as the device is on your license. If a device is signed off in the program, or we free its slot directly, we immediately replace its device ID with zeros; what remains stays linked to the license. A sign-off requested by email only takes effect at the next contact of the device; the same then happens. If a license was revoked more than 12 months ago, we sign off its devices in the same way.

If you ask for a device to be signed off, by email to us or later in the customer portal, we record when that was asked and through which route. The device keeps its slot until it next contacts our server or until we move your license to another customer number. We then sign it off as described above and delete that record; the sign-off itself remains, with who asked for it. If the request is withdrawn before then, we delete the record and the device stays active. If the device never makes contact again and we do not move the license, the record stays for as long as the device is on your license.

For each contact (activation, a repeat check or signing off) we record the type of contact, the outcome and the time, without an IP address. We keep each entry for 24 months after the contact, also if the device was signed off earlier.

The server issues a digitally signed proof of entitlement for each device. For each proof of entitlement we record the sequence number, which key signed it, the version of the entitlements, the status, until when it is valid, when we issued it and a checksum, not the proof itself. We keep these entries for 24 months after the issue, also if the device was signed off earlier.

If we give you temporary emergency access, for at most 30 days, we record for which license and which device ID, when we issued it, until when it is valid, when your program collected it, and when and why it ended. We keep this data for up to 24 months after the end of its validity. The reason for issuing it is in our administration log: a code from a fixed list, sometimes with a ticket number, without your name or address.

Recipients of your data

This website and our order and license server are hosted by Cloudflare, Inc., partly from the United States. Cloudflare processes on our behalf, as a processor, the connection data, the database of orders, licenses and devices (Cloudflare D1) and the Turnstile check. That transfer to the United States rests on the EU-U.S. Data Privacy Framework: Cloudflare participates in it, and the European Commission adopted an adequacy decision for that framework on 10 July 2023 (Implementing Decision (EU) 2023/1795). Cloudflare also applies the European Commission’s standard contractual clauses, as a fallback in case the Data Privacy Framework does not, or no longer, applies. You can look up the current status at dataprivacyframework.gov.

If you pay through Mollie, Mollie shares the data needed for that payment with the companies affiliated with Mollie. For that processing Mollie is not a processor acting on our behalf, but an independent controller: Mollie decides how it processes payment data and is itself responsible for that processing. See Mollie’s own privacy statement for more information.

We use Zoho Mail for email, in Zoho’s European data center (zoho.eu). Zoho processes the emails you send us and that we send you, and with them orders placed by email. Zoho does so on our behalf, as a processor.

We send the email with your license key, or with the confirmation of an upgrade, through Brevo (Sendinblue SAS, France). The same applies to the email we send if we cannot apply an upgrade and refund the amount, to the email about a chargeback, to the code we send to your new address when you change your email address, to the message to your previous address after such a change, and to the confirmation of a withdrawal through this website. Brevo processes your email address and the content of those emails on our behalf, as a processor. Under Brevo’s data processing agreement, Brevo and its sub-processors may also process data outside the European Economic Area; Brevo applies the European Commission’s standard contractual clauses for that.

For each email we send through Brevo, except the code for a change of address, we keep track of the type of email, which order or change it belongs to, whether sending succeeded, how often we tried, the last error message, the reference Brevo gave the message and the times. If the email did not arrive, we also keep the reason Brevo gave, such as an undeliverable address. Your email address and the content of the email are not in it. This record has no deletion period.

If you report a device on your license that you do not recognize and we request its sign-off for you, we send you a message about that sign-off through Brevo. Brevo processes your email address and the content of that message for this, as described above.

If you choose the Mercator (OSM) map projection in Celestium Pro, the OpenStreetMap Foundation (United Kingdom) receives your IP address and the numbers of the map pieces your computer requests (see Map material). It is not a processor acting on our behalf: we do not receive those requests, and it processes them under its own privacy policy (osmfoundation.org/wiki/Privacy_Policy). According to that policy, map pieces are served by a global network of cache servers; that network determines which server your computer reaches. For the United Kingdom, the European Commission has decided that it ensures an adequate level of protection (Implementing Decision (EU) 2021/1772, extended by Implementing Decision (EU) 2025/2574 of 19 December 2025, which applies until 27 December 2031).

This website

This website sets no cookies and uses no trackers. The order form and the withdrawal form keep a copy of what you enter temporarily in this browser tab (if your browser does not allow that, the withdrawal form keeps it in the page address instead, and so in your browser history); we do not send that copy anywhere. Fonts are served from this site itself rather than from an external service, so your visit is not disclosed to third parties.

As with any web server, connection data is briefly processed to deliver the site and protect it against abuse.

There is currently no customer portal you can log in to. We therefore create no login links or login sessions.

Retention periods

We keep financial records, such as invoices, for at least seven years, the period the statutory tax record-keeping duty requires. We do not delete the orders and payments in our order server after that period. Once we have anonymized your data they remain without your name and email address, but with the reference the payment service gave your payment.

For a paid order placed through the order form, with its VAT evidence, that period runs until the end of the calendar year of payment plus seven years. After that period we delete the VAT evidence (IP country, stated country, payment country, payment method and card country) and the raw payment events.

We keep your email address for as long as you have a license that has not been revoked: we need it for support, to send your license key again and for upgrades.

Once all your licenses have been revoked, or you have none, and the retention period of all your orders has passed, we anonymize your data: we replace your email address with a number and remove your name from your orders and licenses. Orders that expired without anything being paid are deleted at that point, with the VAT evidence and payment data that belong to them, unless a license, a refund, a chargeback or a reserved discount code is still attached to such an order, or you withdrew from that order. The other orders and your licenses remain stored after that, without your name and email address. Your customer number, your language choice and the times of your customer record are also kept. If you withdrew from an order, we keep your name and email address with that withdrawal as proof. After the retention period of the withdrawal we delete them, even if you remain a customer.

If you ask us to change your email address, we send a code to the new address. Until the change is confirmed with that code, we keep the new address, a value derived from the code, when the code expires and how often a wrong code was entered. The code is valid for 30 minutes. If the change is not confirmed in time, we delete this data at the next check of your customer record. That check goes past all customers in rounds, so the deletion happens at most one round after the code expired. How long a round takes depends on the number of customers.

After a change of address we send a message to your previous email address. We keep that previous address for another 30 days, plus at most one check round as described above. This lets us see whether someone is trying to take over a license through a change of address.

For sales to customers in other EU countries that fall under the VAT Union scheme (One Stop Shop), a longer retention period of ten years applies, counted the same way.

An order that is not paid within 48 hours expires. If a payment is still in progress at that point, such as a bank transfer, we wait for its outcome; if that payment fails or expires, the order expires after all.

If after that you place no new order for 30 days, and you have no paid order and no license with us, we delete your email address and your expired orders, with the VAT evidence that belongs to them.

If you withdrew from an order, we do not delete your email address and that order this way: they follow the retention period of the withdrawal.

This does not apply if we created your customer record ourselves, for example for a license we issue outside the order form: we anonymize that record under the rule above, no earlier than 30 days after we created it.

Every action we take as administrators on your customer record or your license, and every anonymization, goes into our administration log: which action, on which customer or license number, when, and a reason: a code from a fixed list, sometimes with a ticket number or the number of a payment, without your name or address. We do not delete these entries. They remain after anonymization too, with your anonymized customer record.

We make backups of the database of orders, licenses and devices, so that we can restore the data after an outage or an error. Cloudflare keeps a restore history of that database covering the last 7 days. Every day we make an encrypted copy, stored with Cloudflare in the EU. That copy is deleted after 36 days. Once a week we fetch a copy to a computer of our own and keep it for about 12 weeks. If a copy is also on a separate drive, we delete it only once that drive is connected again and the copy is older than that period; while the drive is not connected, that copy has no fixed end date. If we delete or anonymize your data in the database, it stays in the backups until those backups are deleted under these rules.

We keep email correspondence for as long as is needed to handle your question and any later questions about the same matter.

Your rights

You have the right to access the personal data we process about you, to have it corrected or erased, to have its processing restricted, and to object to its processing. You also have the right to receive the data you gave us in a common format, so you can transfer it to another party.

We do not carry out profiling. We take one decision about your license automatically: if a payment is charged back, our server revokes the license or the upgrade of that payment, without anyone looking at it first. You receive an email about it. If the revocation is wrong, email us at info@celestium.nl. A person on our side then reviews the decision again; you can give your view and contest the decision.

Get in touch at info@celestium.nl to exercise any of these rights. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the data protection authority in your own country.

Changes to this statement

We may update this statement, for instance if the program or the ordering process changes. The current text always appears on this page.

Details

• Celestium is a trade name of De Gouden Cyclus
• Parallelweg 9, 3281 LM Numansdorp
• info@celestium.nl
• Chamber of Commerce: 42153969
• VAT number: NL005539438B27