[TeMPOraL]

> Does it really even matter if you're sending them your credit card details anyway?

But are you sending them this info? I thought a lot of sites used third-party payment processors precisely in order not to handle this data themselves (and be liable for mishandling).

[JazzXP]

I guess in an app they could screen record that transaction, but if they're only storing fields and values, this is outside of what they can capture.