SECURITY

PAYMENT

Celeran EG never sees or stores your card details.

Squarespace checkout and Stripe process payments (PCI DSS).

DATA

Celeran EG staff do not open or review your uploaded files.

Your phone and email are used only to verify and deliver your access.

ACCESS

Uploaded files and results are deleted when your 48-hour access window ends.

You can delete them sooner from the results page.

ENCRYPTION

TLS 1.2 and TLS 1.3 protect information in transit.

Rated A+ by Qualys SSL Labs.

How Celeran EG protects your purchase and your data

Last reviewed: October 2026

Payment

Purchases go through Squarespace’s checkout, with Stripe as the payment processor. Both are PCI DSS compliant. Your card details go directly to them; Celeran EG never sees or stores your card number.

As with any online purchase, Celeran EG receives the order details collected at checkout, such as your name, email address and billing address, to fulfil, invoice and refund orders.

Verification and access delivery

After checkout, you enter a mobile number and an email address so your access can be delivered securely.

  • Your mobile number receives a six-digit verification code by SMS. The code is stored encrypted and expires after five minutes.
  • Your email address receives your secure access link.
  • Your access session keeps your mobile number, email address, IP address and browser type to protect the link against misuse. They are deleted automatically when your 48-hour access window ends.
  • During verification, your mobile number and email address are also held in a temporary checkout record. They are removed from it as soon as your code is verified, and the record itself is deleted automatically after 24 hours.
  • Celeran EG’s system logs do not record your mobile number, email address or verification code.
  • So that each purchase gives one access, Celeran EG keeps a record of the order number, amount and Stripe payment reference. It contains no contact details.

Your uploaded data

  • Uploaded CSV files and the results generated from them (CSV and PDF) are deleted from Cloudflare storage when your 48-hour access window ends.
  • On the results page, “Delete my data” deletes them immediately, without waiting for the window to end.
  • Celeran EG staff do not open, review or use your uploaded files or results.

Encryption

  • celeraneg.com is rated A+ by Qualys SSL Labs. Verify the live rating →
  • Only TLS 1.2 and TLS 1.3 are accepted; older, vulnerable protocols are disabled. HTTP Strict Transport Security (HSTS) prevents connections from being downgraded to unencrypted ones.
  • When your browser supports it, the connection uses post-quantum key exchange. This protects against “harvest now, decrypt later”: data captured today and stored until future quantum computers can decrypt it.
  • Independent testing shows no exposure to known vulnerabilities such as Heartbleed, POODLE and ROBOT.
  • The purchase verification system and the Ingenium applications run on Cloudflare. All connections to them are encrypted, and Cloudflare encrypts the data it stores.

Service providers

Celeran EG uses these providers. Each keeps its own records of what it processes, under its own privacy policy.

SquarespaceWebsite, checkout and order records
StripePayment processing
CloudflarePurchase verification, Ingenium applications and temporary file storage
Seven.ioVerification code by SMS
MailgunAccess link by email

Questions

For any question about your data, use the contact form.