REPORT SECURITY ISSUES

Why Responsible Disclosure Matters

The security of our customers' personal information, payment data, and order details is a top priority for Safari Cards PDX. We sell collectible trading cards — including basketball cards, soccer cards, baseball cards, football cards, Pokémon cards, Magic: The Gathering cards, Panini products, Topps products, and other valuable collectibles — and our customers trust us to protect their information and provide a safe shopping experience.

Responsible disclosure allows us to investigate and address potential vulnerabilities before they can be exploited, protecting both our customers and our business. We value the contributions of security researchers and concerned individuals who take the time to report issues responsibly.

What to Report

We welcome reports about potential security issues that could affect the safety and security of our website, customer data, or business operations. Examples of issues that should be reported include:

• Vulnerabilities in our website that could allow unauthorized access to customer data
• Cross-site scripting (XSS) vulnerabilities
• SQL injection vulnerabilities
• Authentication or session management flaws
• Unauthorized data exposure
• Payment processing security concerns
• Phishing websites impersonating Safari Cards PDX or pdxcardsafari.shop
• Suspicious emails claiming to be from Safari Cards PDX
• Any activity that could compromise the security of customer accounts or orders

What Not to Report Through This Channel

The security reporting process is intended specifically for security vulnerabilities and threats. The following types of issues should be directed to our regular customer support channels instead:

• Order status inquiries or tracking questions
• Product questions about collectible trading cards
• Return or refund requests
• General customer service questions
• Billing inquiries
• Feedback or feature requests
• Website usability suggestions

For these types of inquiries, please contact our customer support team at contact@pdxcardsafari.shop or visit our Contact Us page.

How to Report a Security Issue

If you have identified a potential security issue, please report it by email:

Information to Include in Your Report

To help us investigate and resolve the issue as quickly as possible, please include the following information in your security report:

• Description: A clear and detailed description of the security issue or vulnerability.
• Location: The specific URL, page, or feature where the issue was discovered.
• Steps to Reproduce: Step-by-step instructions on how to reproduce the issue, if applicable.
• Impact Assessment: Your assessment of the potential impact of the vulnerability.
• Screenshots or Evidence: Any screenshots, logs, or other evidence that may help us understand and verify the issue.
• Your Contact Information: A way for us to contact you if we need additional information or clarification (this is optional but helpful).

Responsible Disclosure Expectations

When reporting a security issue to Safari Cards PDX, we ask that you:

• Act in Good Faith: Report the issue with the genuine intent of helping us improve security, not to exploit the vulnerability or cause harm.
• Avoid Data Access: Do not access, modify, download, or delete customer data or business data that does not belong to you.
• Avoid Disruption: Do not engage in any activity that could disrupt, degrade, or damage our website, services, or infrastructure (including denial-of-service attacks).
• Maintain Confidentiality: Do not publicly disclose the vulnerability before Safari Cards PDX has had a reasonable opportunity to investigate and address the issue.
• Comply with Laws: Conduct your research and reporting in compliance with all applicable laws and regulations.

What Happens After You Report

After receiving your security report, Safari Cards PDX will:

1. Acknowledge: We will acknowledge receipt of your report as soon as reasonably possible.
2. Investigate: Our team will review and investigate the reported issue to determine its validity and severity.
3. Remediate: If the issue is confirmed, we will take appropriate steps to address the vulnerability.
4. Follow Up: We may contact you if we need additional information or to provide an update on the resolution (if you provided contact information).

Please understand that investigation and remediation timelines may vary depending on the complexity and severity of the reported issue.

Account and Order Security Tips

As a Safari Cards PDX customer, you can also help protect your own account and orders by following these security best practices:

• Use a strong, unique password for your Safari Cards PDX account.
• Do not share your account credentials with anyone.
• Be cautious of phishing emails or messages that ask for your login credentials or payment information. Safari Cards PDX will never ask for your password via email.
• Verify that you are on the official Safari Cards PDX website (pdxcardsafari.shop) before entering any personal or payment information.
• Report any suspicious emails or communications claiming to be from Safari Cards PDX to contact@pdxcardsafari.shop.
• Keep your browser and operating system updated to benefit from the latest security patches.

Scope

This security reporting page applies specifically to the Safari Cards PDX website at pdxcardsafari.shop and services directly operated by Safari Cards PDX. Security issues related to third-party services, platforms, or payment processors should be reported directly to those providers.

This security reporting page is provided for informational and operational purposes and should be reviewed by qualified legal counsel before publication.