Re: Refunds hide fundamentally insecure system
> I send them money but don't give them my credit card details.
But are you aware of the amount and nature of personal information (about you) that PayPal transmits to the merchant? I implemented a merchant solution some years ago and we were basically getting the entire contents of the user's profile: name, address, phone number, email, the lot. Our API would throw all that away as we had no need for it and didn't want any data protection headaches plus we took pride in respecting our customers' privacy. However, I am not sure every other business is the same, so I stopped using PayPal after that.