They're using Stripe checkout, so all your CC information is being entered in an iframe hosted by Stripe.