TLS, which offers a better level of security than SSL and uses 256-bit encryption and contemporary SHA2 ciphers, secures your payment.  PCI-compliant service providers are used to handling your payment. Our providers comply with current security requirements for processing payment information if they are PCI compliant. Visit this page for a comprehensive FAQ on what PCI compliance includes.  In other words, when you purchase Gumroad, your payment information is not saved anywhere. Only a token that symbolizes your credit card is available to us; your actual credit card information is not.