Inline card capture on Stripe and Square
A shop taking a deposit used to hand the customer off to the rail's hosted checkout, and that redirect is where bookings leak. The card field now renders inside the flow as a real Pay step: the customer sees it coming from step one, the confirm button reads Confirm and pay, and paying lands on the ordinary confirmation screen. Card numbers still never reach us, the field belongs to Stripe or Square and we only ever see a token. Off until you switch it on in billing, and Shopify shops keep the redirect, since Shopify exposes no card field to us.