Card details stay in your browser and are never written to our server. This drop uses authorization-on-file / invoice for live charges.