Protecting personal grimoires

Data controller

The data controller is the operator of Blackthorn Dice. Legal details and contact email are kept up to date on the workshop’s official materials. Requests go through the website Contact page.

Collected data

Blackthorn Dice only collects information useful for running the shop: customer account, email validation, orders, addresses, phone number, contact messages, reviews, comments, newsletter, coupons, loyalty points and logs required for security.

Purposes

• Create and secure a customer account.
• Prepare, ship and track orders.
• Answer messages and support requests.
• Send requested transactional emails and newsletters.
• Moderate reviews, comments and testimonials.
• Manage coupons, loyalty points and accounting obligations.
• Maintain security and understand general website usage.

Address and autocomplete

At checkout, address assistance uses the French public Geoplateforme/BAN service for France and overseas departments. Text typed in the address, city or postcode may be sent to that service to suggest a consistent address. For other countries, entry remains manual and shipping rates are calculated according to the selected country.

Visitors and country origin

Internal statistics may record a visited page, date, limited browser information, hashed IP address, optional referrer and country when provided by hosting, a trusted proxy or browser language information. Known bots are ignored as much as possible.

Recipients

Data is intended for the Blackthorn Dice workshop and providers required to run the service: hosting, shipping, payment when active, email and strictly useful technical tools. Data is not sold.

Retention periods

Data is kept for a period suited to its purpose: active account, order tracking, legal obligations, transaction evidence, security or request management. Messages, reviews and newsletter subscriptions may be deleted upon request when the law allows it.

Cookies and trackers

The website uses cookies required for operation: session, cart, language and security. Non-essential trackers, when present, are subject to a clear choice before activation.

Your GDPR rights

You may request access, rectification, erasure, restriction, objection or portability of your data when these rights apply. Use the Contact page and specify your request and the relevant email. Proof of identity may be requested if necessary.

Security

Blackthorn Dice applies measures intended to limit unauthorized access, protect forms, reduce exposure of sensitive files and check submitted content. Technical details are not published to avoid helping potential attackers.