Report Security Issues

Card Corner II — Helping us keep your collectible trading card shopping experience safe and secure.

1. Why Responsible Disclosure Matters

Responsible disclosure is the practice of reporting security vulnerabilities to the affected organization in a private, constructive manner, rather than publicly disclosing or exploiting them. This approach allows us to investigate and address the issue before it can be misused, protecting our customers and their personal information.

Card Corner II appreciates and values individuals who take the time to report potential security issues. Your efforts contribute directly to a safer online experience for collectors who trust us with their purchases and personal data.

2. What to Report

We encourage you to report any security concern that may affect CardCorner.shop, our customers, or our operations. Examples of issues you may report include:

3. What Not to Report Through This Channel

This security reporting channel is specifically for security-related issues. Please do not use this channel for:

• Order inquiries: For questions about orders, shipping, or tracking, please visit our Contact Us page or email contact@CardCorner.shop.
• Returns and refunds: For return requests, please refer to our Refund & Returns Policy.
• Product questions: For questions about specific collectible trading card products, contact our customer service team.
• General feedback or complaints: Please use the Contact Us page.

4. How to Report a Security Issue

To report a security issue, please email us at:

4.1 Information to Include in Your Report

To help us investigate and address the issue efficiently, please include the following in your report:

• Subject Line: Use a clear subject line such as "Security Issue Report" or "Vulnerability Report."
• Description: A clear, detailed description of the issue or vulnerability.
• Steps to Reproduce: If applicable, provide step-by-step instructions on how to reproduce the issue.
• URL: The specific URL or page where the issue was observed.
• Screenshots or Evidence: Attach screenshots, logs, or other evidence that may help us understand the issue.
• Impact Assessment: Describe the potential impact of the vulnerability, if known.
• Your Contact Information: Provide your name and email address so we can follow up with you if necessary.

5. What to Expect After You Report

After you submit a security report to Card Corner II:

1. Acknowledgment: We will acknowledge receipt of your report. Response times may vary, but we aim to respond within a reasonable timeframe.
2. Investigation: Our team will investigate the reported issue to verify and assess its impact.
3. Resolution: If the issue is confirmed, we will take appropriate steps to address it.
4. Follow-Up: We may follow up with you for additional information during the investigation.

6. Responsible Disclosure Expectations

If you report a security vulnerability to Card Corner II, we ask that you:

• Do not publicly disclose the vulnerability until Card Corner II has had a reasonable opportunity to investigate and address it.
• Do not exploit the vulnerability beyond what is necessary to confirm its existence.
• Do not access, modify, or delete data belonging to other customers or Card Corner II.
• Do not perform actions that could disrupt the availability or performance of CardCorner.shop.
• Do not use the vulnerability for personal gain or to harm Card Corner II or its customers.
• Act in good faith and with the intent of helping improve the security of our platform.

7. Protecting Your Own Account

While we work to keep CardCorner.shop secure, you can also take steps to protect your own account:

• Use a strong, unique password for your CardCorner.shop account.
• Do not share your account credentials with others.
• Be cautious of phishing emails or messages that appear to be from Card Corner II — we will never ask for your password via email.
• Log out of your account when using shared or public devices.
• Monitor your account for unauthorized activity and report any concerns immediately.

8. Reporting Suspicious Emails or Communications

If you receive an email, text message, or other communication that appears to be from Card Corner II but seems suspicious, do not click any links or provide any personal information. Instead:

• Forward the suspicious message to contact@CardCorner.shop with the subject line "Suspicious Communication."
• Include any details about the communication, such as the sender's email address, the content of the message, and any links included.

Card Corner II will never ask you to send your password, full credit card number, or Social Security number via email.

9. Scope

This security reporting page applies specifically to CardCorner.shop and services operated by Card Corner II. It does not apply to third-party services, platforms, or websites that may be linked from our website.

10. Changes to This Page

Card Corner II reserves the right to update this page at any time. Changes will be reflected on this page. We encourage you to review this page periodically.

This page is provided for informational and operational purposes and should be reviewed by qualified legal counsel before publication.