Hacker News Reader

Are you legally allowed to even do that? Do you store card data yourself?

Yes and yes. We are a PCI Level 1 Service Provider. More information on our security practices: https://stripe.com/security