BACK TO HOME
dickblick

dickblick

General Servicedickblick.com

Privacy Conclusion

"Dick Blick exhibits high-risk privacy practices characteristic of large e-commerce platforms with aggressive data monetization. The company collects extensive sensitive data including full credit card numbers, Social Security numbers, health information, and protected classifications; shares this data broadly with advertising networks (Google Ads, Criteo, Facebook, Microsoft) and unspecified third parties for behavioral targeting; and employs sophisticated tracking including session replay and cross-site retargeting. Critical gaps in user control include explicit security disclaimers, fragmented opt-outs, indefinite retention policies, and the ability to modify the privacy policy with immediate effect."

Risk Score
78
HIGH RISK

dickblick Privacy Concerns & Scorecard

Privacy Risk Analysis
Transparency & RightsCRITICAL

Company explicitly disclaims security guarantees and states users provide data 'at your own risk' with no liability for breaches

Third-Party SharingCRITICAL

Data shared with extensive network of third parties for targeted advertising including Google Ads, Criteo, Facebook, Instagram, LinkedIn, and Microsoft Advertising without explicit opt-in for sharing

Tracking & AdsCRITICAL

Criteo advertising partner collects and retains browsing history, products viewed, and products purchased for up to 6 months for cross-site behavioral targeting

Data CollectionCRITICAL

Extensive collection of sensitive personal data including full credit card numbers during phone orders, Social Security numbers, government identification numbers, health information, racial and ethnic origin, and keyboard/mouse movement tracking

Retention & ControlHIGH

Customer service call recordings retained for 100 days; security camera footage retained up to 30 days without clear user notice at point of collection

Recommended Actions

No recommended actions at this time.

Automate your privacy

Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.

Data Collection & Tracking

Personal Information Collected

Identity Data

Account management, order processing, communications, and verification

Financial Data

Payment processing and fraud prevention via Chase Paymentech and TokenEx

Protected Classifications

Employment screening, background checks, and drug screening via third-party vendors

Employment & Education Data

Job application processing via iCIMS portal and employee management

Behavioral & Interaction Data

User experience analytics, targeting, and fraud detection via Microsoft Clarity, Google Analytics, and New Relic

Device & Network Data

Site analytics, fraud prevention, advertising targeting, and performance monitoring

Location Data

Analytics, targeted advertising, and business operations

Tracking Technologies

Analytics, advertising, user tracking, and site functionality

Communication Data

Customer service, quality assurance, and marketing research

Security Data

Loss prevention and store security

Third-Party Enhanced Data

Marketing targeting and data enrichment

Inferred & Derived Data

Targeted advertising and personalization

Financial Incentive Data

Future marketing purposes and promotional communications

Cross-Platform Tracking

Dick Blick tracks you across the internet through Criteo (which retains your browsing and purchase history for 6 months), Google Ads remarketing, and third-party analytics providers. Session replay via Microsoft Clarity records your detailed interactions on the Dick Blick website in real-time. Additionally, the company shares your data with Facebook, LinkedIn, and other social media platforms, which may use it to track you across their own networks.

Tracking Methods:

Cookies (First-Party & Third-Party)

Both first-party cookies (set by Dick Blick) and third-party cookies (set by Google, Criteo, Microsoft) track you across visits and across the internet. Criteo cookies retained for up to 6 months.

Web Beacons & Pixel Tags

Invisible tracking pixels from Google, Criteo, and social media platforms embedded in pages and emails allow these companies to track your activity across websites and email opens

Session Replay (Microsoft Clarity)

Records your real-time interactions on Dick Blick website including clicks, keystrokes, scrolling, and form inputs (sensitive data like passwords masked). Data sent to Microsoft for analysis.

Analytics Tracking (Google Analytics, New Relic)

Tracks page views, time on page, user flows, performance metrics, and errors. Google Analytics includes advertising features for remarketing and demographic reporting.

Advertising Networks (Google Ads, Criteo, Facebook)

Google Ads, Criteo, and social media platforms track you across Dick Blick and other websites to serve targeted ads based on your browsing history and purchases

Google Tag Manager

Central tracking system (GTM-WXZTZ46) that manages deployment of other tracking codes, cookies, and pixels across the Dick Blick website

Device Fingerprinting

Combination of device information (browser, OS, IP, device ID) and behavioral signals used to identify and track you across different browsers and devices

Single Sign-On (Facebook, LinkedIn, Google, Microsoft)

Using social media accounts to log in to Dick Blick (e.g., for job applications via iCIMS) may grant Dick Blick and those platforms access to additional profile data and tracking capabilities

Email Tracking

Pixel tags and beacons in promotional emails track whether you open emails, click links, and interact with content

Click Tracking Attributes

HTML data attributes (data-track-category, data-track-action, data-track-link, data-track-label) on footer links and throughout site track specific user interactions for analytics

AI & Data Training

dickblick does not train AI on your content

Based on their public policy, your content is not used to train AI models.

How to Object

No opt-out available

This service does not currently provide a public way to opt out of AI training.

Why We Analyzed dickblick

TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.