About Our Store's Security
Thank you for choosing the antique shop SILVER-LUG.
We use a system with world-class security to ensure you can shop with peace of mind.
In light of recent news regarding internet security, we understand that many customers may have concerns about transacting with our store. Here is information about our security measures and our payment and login system.
What's on this page
1. Regarding the "PHP vulnerability" reported on October 21, 2026, and our store's security
In short, our store is completely unaffected by this issue, and your information remains securely protected, so please rest assured.
Overview of the news and why our store is safe
On October 21, 2026, news was reported that a vulnerability had been found in PHP, a programming language used to build many websites and online stores, causing many online stores in Japan to become temporarily unavailable.
However, the online store system we use, Shopify, is built on a completely different system (programming language) called Ruby on Rails, not the affected PHP. To use a building as an analogy, the blueprints and components we use are fundamentally different, so our store is completely unaffected by this PHP vulnerability.
Our daily security management
In addition to the security of the system, we strictly maintain the following rigorous management system.
-
Unauthorized access prevention for the admin panel:
Two-factor authentication is required for staff logins to prevent unauthorized logins by third parties. -
Carefully selected and inspected integrated systems:
We use only the minimum number of systems (apps) that assist with store functions and have had their security confirmed, and we regularly review their permissions and security.
2. Changes to the login method
To protect your important account more securely and make shopping even more convenient, we will soon switch the login method for the member function to a one-time passcode system.
How will it change?
-
Current login method:
Email address + password set by the customer -
New login method:
When you enter your email address, a 6-digit verification code (one-time passcode) will be sent to that address via email. Simply enter that 6-digit number on the screen to complete the login (no password entry required).
Three benefits of switching to a one-time passcode system
-
It reliably prevents "password snooping and account takeovers"
A different one-time disposable code is issued every time you log in. Therefore, even if your password were to be leaked on another website, there is no risk of unauthorized login to our account. -
No more remembering or managing passwords
You will no longer have to worry about forgetting your password when trying to shop after a long time or finding it difficult to reset your password. -
Only you can reliably log in
Only you can check the code because only you can open your registered mailbox, so the security of your account is greatly enhanced.
※Even after the switch, you can still log in with the same email address as before, and your past order history and registered information will be carried over as is, so please rest assured.
3. About our system (Shopify) security
Our store uses Shopify, one of the world's largest online store systems, used by millions of stores in over 175 countries.
We do not store any credit card information
The credit card number you enter when shopping is encrypted using advanced technology and processed directly by the payment system.
Even our staff at SILVER-LUG cannot see your credit card number, and your card number is not saved on our computers or admin panel.
The same "highest rank" security standards as banks and major payment companies
Shopify has obtained Level 1 certification, the strictest and highest rank, in PCI DSS, the international security standard for the credit card industry. This is the same security standard as major banks and credit card companies, and its protection features are applied to our store's shopping screen.
In addition, all personal information you enter, such as your name, address, and phone number, is protected by encrypted communication (SSL/TLS) and cannot be viewed by malicious third parties.
4. About Shop Pay
We have summarized the mechanism and usage of "Shop Pay," which can be selected at the payment screen.
What is Shop Pay?
It is a secure and speedy payment service provided by Shopify, the cart system we use.
Once you register your email address and mobile phone number with Shop Pay, you can easily and securely pay from your next purchase by simply entering the 6-digit code (SMS authentication) sent to your mobile phone, without having to re-enter your shipping address or credit card information. You can use it not only at our store but also at other online stores that have introduced Shop Pay.
Shop Pay Official Website (External Site)
How to use Shop Pay
How to register a Shop Pay account
There are two ways to register a Shop Pay account: "register before purchasing" and "register at the same time as purchasing."
-
How to register a Shop Pay account before purchasing
If you want to register Shop Pay in advance, please complete the procedure from here (Shop Pay official page). -
How to register a Shop Pay account at the same time as purchasing
To save you the trouble of entering information during your next purchase, you can also register at the checkout screen. Please check "Save information for next purchase" on the checkout screen and complete your purchase with your mobile phone number entered.
※It only appears when you select credit card payment.
※You can also register in the same way from the purchase completion screen.
This way, when you enter your email address during your next purchase, you can use Shop Pay.
Important notes for use
- If you register at the same time as purchasing, the "shipping address and recipient information" entered during that purchase will be saved. We do not recommend registering (checking the box) when entering an address other than your home address for gifts, etc.
- For customers who say, "I don't remember registering with Shop Pay," there are very many cases where the above "Save information for next purchase" was checked when checking out during a past purchase (at our store or another Shop Pay store), and it is registered. Please rest assured that it is not unauthorized access.
How to delete (cancel) a Shop Pay account
If you wish to delete your registered information from Shop Pay, you can complete the procedure anytime from here (Shop Pay account cancellation page).
- Enter the email address (or phone number) of the account you want to delete.
- Instructions will be sent to the contact information you entered, so please follow the instructions on the screen to complete the deletion procedure.
This will delete your Shop Pay registration information.
5. Frequently asked questions (Q&A)
Q1. Is there any concern that information from past purchases has been leaked due to the "PHP vulnerability" seen in the news?
A. No, there is no concern at all. As explained in Section 1, our store's system does not use the affected "PHP" and runs on a completely different system. Your information from past purchases is also securely protected.
Q2. When paying by credit card, I am worried that my card information will remain at the store.
A. Our store has a system where we cannot hold or view your credit card number at all. Card information is processed directly and encrypted by the payment system with world-class security standards (PCI DSS Level 1), so please rest assured.
Q3. What happens to my current membership registration and order history when it switches to the new login method (one-time passcode)?
A. All your current registration information and order history will be carried over as is. After the switch is complete, simply enter the email address you have registered and enter the 6-digit number that arrives in the email, and you can use My Page just as before. You do not need to perform any special migration procedure on your end.
Q4. I suddenly received a 6-digit number (SMS) from "Shop Pay". Will money be automatically withdrawn?
A. Just receiving a 6-digit number does not complete the payment, and money will not be withdrawn, so please rest assured. If you have saved your email address in Shop Pay from a past purchase, when the same email address is entered on the payment screen, a 6-digit code is automatically sent to your mobile phone for identity verification. If you do not wish to use Shop Pay, please close the code entry screen (or select "Purchase using another method") and proceed to the regular payment screen, or try canceling the registration from the above "How to delete a Shop Pay account".
Q5. What should I do if I do not receive the 6-digit code for login or the order confirmation email?
A. Please check if it has been sorted into the spam folder, and if you cannot find it, please allow emails from the following domains to be received in your mobile phone company or email software settings.
- System and order confirmation emails, etc.:
@t.shopifyemail.com - Contact emails from our store, etc.:
@silver-lug.com
6. How to use our store with peace of mind
To protect your own important information, please keep the following points in mind when shopping or logging in.
-
Do not tell anyone your login verification code
The "6-digit verification code" received via email or SMS is an important key for identity verification. Our store staff will never ask you for a verification code, so please be careful not to tell anyone. -
Even if you receive a verification code you do not recognize, do not tell anyone or enter it
If you receive a verification code even though you are not performing login or payment operations yourself, a third party may have accidentally entered your email address, etc. Login or payment will not be completed unless the code is entered, so do not tell anyone or enter it on the screen, and simply discard the email or SMS.
-
Do not log in from suspicious email or SMS links
To prevent damage from fake emails pretending to be an existing store, do not open links (URLs) in emails or SMS that seem even slightly suspicious, and access our store from your usual bookmark (favorite) or search site. -
Please check the destination (URL) in the browser address bar
The official domain (address) of our online store is silver-lug.com. When logging in or paying, please check whether the address bar at the top or bottom of the screen is correct. -
Keep your device and browser up to date, and log out after use on shared devices
Please always update your smartphone or computer OS and internet viewing software (browser) to the latest version. Also, when using a computer shared with family or a device outside, please be sure to log out after shopping.
Contact Us
If you have any questions or concerns about our store's security, login method, or payment, no matter how small, please feel free to contact us anytime.
