Security is a workshop priority

What we protect

The shop mainly processes information needed for e-commerce: order identity, email, shipping address, phone number, purchase history, messages, reviews, newsletter and loyalty points. Unnecessary data is not requested.

General protection measures

The website applies application-level safeguards, restricts admin access, checks uploaded files, validates forms, reduces exposure of sensitive folders and logs selected events useful for security. In production, access uses HTTPS, strong passwords, limited admin access and regular backups.

These details are intentionally general: a public page does not reveal internal architecture, exact blocking rules or sensitive paths.

Payment and bank details

Blackthorn Dice does not store any card numbers. When online payment is active, payment information is processed by a specialized provider. If payment is in prepared mode, no bank details are entered on the website.

GDPR principles

The shop is built around GDPR principles: clear purposes, data minimization, reasonable retention, access limited to authorized people, transparency for customers and the ability to exercise rights.

• Access: request a copy of data linked to an account or orders.
• Rectification: correct inaccurate information.
• Deletion: request erasure when the law allows it.
• Objection or restriction: request stopping or limiting certain processing.
• Newsletter: unsubscribe at any time.

Cookies, analytics and visitors

Internal statistics help understand visited pages and countries of origin when the information is available. Known bots are excluded as much as possible. Non-essential trackers, when present, are presented with a clear choice.

Automated emails

Account creation, address validation, order tracking, newsletter and admin alert emails depend on the SMTP server configured in the workshop. Messages remain useful, identifiable and proportionate.

Responsible reporting

If you believe you have found a security issue, contact the workshop with a clear description without publishing details publicly. Do not test on third-party accounts, do not attempt to extract data and do not perform intrusive scanning.

Key point

No website can promise absolute security. Blackthorn Dice applies serious safeguards, reduces collected data and quickly fixes identified issues. Legal texts and security practices are reviewed regularly to stay aligned with the shop activity.