3 ms·
> good luck collecting payments, avoiding fraud or reporting taxes without collecting name and address A client of mine collected just shy of $2M last calendar
by stephenr 3y ago
> good luck collecting payments, avoiding fraud or reporting taxes without collecting name and address
A client of mine collected just shy of $2M last calendar year (2023), and we only store an email address, and a password.
The trick is, let the organisations that (apparently) need that extra data, collect the extra data themselves. Payments are offered via PayPal, Stripe and Amazon Pay, using their hosted payment pages. It works amazingly well. The Stripe and PayPal options can even be achieved without JS, if you wish.
I believe you could also achieve a similar lack of PII using a JS-heavy 'embedded' solution for Stripe and maybe PayPal, but don't quote me on that.
- stpn 3y agoOh yes, to be clear we’re not collecting any of that data ourselves, but it is in our stripe account. I suppose that data isn’t in _our system_ per se, but the arrangement is still relying on our privacy intentions over any systematic guarantee (“we simply don’t have this data”) we could give.