Card details are typed into Adyen-hosted fields and reach this server encrypted; raw card numbers are refused.