Celestial Seeds Studio

Contact

Last Updated: May 9, 2026

Privacy policy.

What data the studio collects, why it collects it, how long it keeps it, and the rights you have under Nevada's online privacy law (NRS 603A and SB 220), the California Consumer Privacy Act (CCPA, as amended by the CPRA), the New York SHIELD Act, and other applicable U.S. state privacy laws.

The short version. The studio is small. We collect the minimum we need to take your order, deliver your file, and stay legally compliant. We don't sell, rent, or share your information with advertisers, and we never train AI on it.

01 Who’s responsible

The business responsible for your data is Melvin Green, sole proprietor, doing business as Celestial Seeds Studio, 1701 S Las Vegas Blvd, Las Vegas, NV 89104, USA. He is also the privacy contact and can be reached at info@celestialseedsstudio.com.

02 What we collect

When you browse

  • IP address, user-agent, and HTTP request metadata, kept for 30 days in server logs for security and abuse-prevention purposes.
  • A first-party analytics cookie (Plausible, privacy-first, no cross-site tracking) recording page views, referrer, and session duration. Anonymous and aggregated.

When you make a purchase

  • Email address (required for the receipt and download link).
  • Name and billing/shipping address (required for sales-tax compliance and print fulfillment).
  • Order details: which images, which license tier, total amount, timestamp.
  • Payment metadata from Stripe: last four card digits, country, fraud-screening result. We do not see or store full card numbers.

When you contact us

  • The contents of your message, your email, and any attachments. Stored in our inbox indefinitely unless you ask us to delete it.

03 Cookies and similar technologies

The site uses three categories of cookies: essential (session, cart, checkout, strictly necessary), preferences (theme, layout, set only when you change a setting), and analytics (Plausible, anonymous, aggregated, no individual identifiers). We do not use advertising cookies, do not embed Google Analytics or Facebook Pixel, and do not engage in any cross-context behavioral advertising as defined by the CCPA/CPRA.

04 Why we process your data

Each category of processing serves a specific business purpose:

Activity Purpose
Processing your order To perform the contract you entered into with us
Sending receipts and download links To deliver the product you purchased
Sales-tax and bookkeeping records To comply with U.S. federal and state tax law
Server logs and abuse prevention Legitimate business interest in security
Email newsletter (if you subscribe) Opt-in consent — withdrawable any time
Anonymous analytics Legitimate business interest in product improvement

Under the CCPA/CPRA we do not sell or share personal information, as those terms are defined by California law, and we have not done so in the preceding twelve months.

05 Who we share data with

The studio uses a small set of service providers. Each is bound by a written data-processing agreement that prohibits using your information for any purpose other than providing services to us.

Vendor Purpose Location
Stripe, Inc. Payment processing San Francisco, CA
Postmark Transactional email Newark, DE
Buttondown Newsletter Charlottesville, VA
Hostinger Server hosting USA
Plausible Anonymous analytics USA

We do not sell, rent, share, or barter your data with advertisers, data brokers, or any third party, as those terms are defined under the CCPA/CPRA. We also do not use any data, yours or anyone else’s, to train artificial intelligence or machine learning systems.

06 How long we keep data

  • Order records — 7 years (IRS and state tax record-keeping requirements).
  • Email receipts — same 7 years.
  • Account data — until you ask us to delete it.
  • Server logs — 30 days.
  • Analytics — 24 months, in aggregate.
  • Newsletter — until you unsubscribe.

07 Your rights

Under Nevada SB 220 (NRS 603A.340), the CCPA/CPRA, the Virginia CDPA, the Colorado Privacy Act, and similar U.S. state laws, you have the right to:

  • Know & access — request the categories and specific pieces of personal information we have collected about you.
  • Correct — ask us to fix inaccurate data.
  • Delete — request deletion (subject to bookkeeping and tax-record retention requirements).
  • Opt out of sale or sharing — we do not sell or share data, but you can confirm this status in writing.
  • Limit use of sensitive personal information — we do not use sensitive PI for inference or profiling.
  • Portability — receive your data in a machine-readable format.
  • Withdraw consent — at any time, for newsletter or any other consent-based processing.
  • Non-discrimination — we will not deny service, charge a different price, or provide a different level of service for exercising any of these rights.

To exercise any of these rights, write to info@celestialseedsstudio.com. We verify your identity by matching the request against the email on your order, and respond within 45 days (extendable once by 45 days where reasonably necessary, with notice). You may also designate an authorized agent in writing to act on your behalf.

If you believe we have not handled your request properly, you may file a complaint with your state Attorney General — e.g. the Nevada Attorney General (ag.nv.gov), the California Attorney General (oag.ca.gov), the New York Attorney General (ag.ny.gov), or the equivalent office in your state.

08 Children

The site is not directed at children under 16. We do not knowingly collect data from minors. If you believe a minor has provided personal data, write to us and we will delete it.

09 Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Database access is restricted to the owner only. We carry out an annual security review. In the event of a personal-data breach involving sensitive information, we notify affected users and the appropriate state authorities without unreasonable delay, in accordance with Nevada NRS 603A.220, the New York SHIELD Act, California Civil Code § 1798.82, and other applicable U.S. state breach-notification statutes.

10 Changes

Material changes to this policy are announced by email at least 30 days in advance, and the previous version remains accessible at /legal/privacy/archive. The current version number and effective date are at the top of this page.