It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
You can now store your card for later use.

When making any purchase with a credit or debit card, you can now select the option to save your card for later use.



If your payment is successful, that card will be remembered for later use. You'll be able to select it during your next checkout without retyping the info every time. Simple, straightforward, and probably very familiar.


We're taking advantage of tried and tested industry-standard solutions used across the world today. Among other things, this means your entered payment data isn't actually kept anywhere on GOG.com. Once your bank approves the purchase, your entered card number is replaced with a unique, encrypted token that can be used only by us to process your future payments, and which cannot be reverse engineered to resolve your card number and data. From time to time, we'll also ask you to verify your information based on a number of security factors, like if you haven't used that card in a long time.

While it's not required, we also strongly recommend enabling Two-Step Login before saving your payment details.

Keep in mind that you can easily remove your saved payment method through the My Account / Orders section. We'll also automatically invalidate all payment tokens for any account that hasn't been used in a long time.


We hope the feature turns out to be particularly useful soon, when you may just feel compelled to click really, really fast.
avatar
Zeyes: I can't help but wonder: All the people who clearly either didn't bother to read the news post all the way through or didn't understand what it said, these are the very people who believe they're equipped to do a better job protecting their own data than GOG will? Does not compute.
I know, it's quite flabbergasting. Do people just read the thread title, and immediately start spewing their garbage based on that alone? Doesn't seem wise.

Have we reached a point where we are too lazy to stop and read? :P
avatar
CARRiON.FLOWERS: Have we reached a point where we are too lazy to stop and read? :P
I think we reached that point long ago but were to slow to and lazy to realize it. :P
No way, man! I'm MUCH safer typing in my credit card details over this unsecured internet connection at the hotel!


So a couple questions for those who know about this stuff, not because I'm concerned but because I'm curious about how it works.

WHO stores the card info and issues the token? Is it an agreement with my issuing bank, or is it gOg's merchant account processor? The latter would make more sense as I imagine not all banks have the token system in place.

And, do you know of any other stores that use this? I mean, is it really widespread and we've just never heard about it because it generally works so seamlessly that there's no reason to raise a hoopla, or is it pretty new and not yet in widespread use?

Anyway, there is no perfect security measure. But from my own merchant account, I know those card processors do not take security at all lightly and there is federal law (US, anyway) mandating the security measures that the processors and the stores must abide by. Obviously not perfect at the store level, as we had a deluge of companies getting their payment servers breached 2-3 years ago. But putting this at the processor level - the people who have to have your card number anyway for each transaction - sounds like the best place to keep it.

Safer than keeping it in my wallet, anyway. I'm more likely to get mugged than I am to have a merchant card processor get breached. More likely that the waiter at a restaurant copies down the card details while swiping it for my bill.
...safe as f***
Given that I'm on this earth because of a failed f***ing accident prevention measure, this comment doesn't exactly reassure me. ; )
avatar
liamphoenix: Now for a wallet...

It'd be nice to drop $100 at a time and, as a result, always know that my bank is adding $2 even to the transaction without needing to do the 2% foreign transaction fee math every time.
Was about to ask this.
A gog wallet was mentioned many moons ago. People get store credit but whats happened with having a wallet on the site?
avatar
cecil: PLEASE NO Insomnia sale... I HATE THEM... :-(
avatar
noncompliantgame: Ditto
Nice to know I'm not the only one who really hates them :-)
avatar
liamphoenix: It'd be nice to drop $100 at a time and, as a result, always know that my bank is adding $2 even to the transaction without needing to do the 2% foreign transaction fee math every time.
avatar
Niggles:
I think it was 3% from one bank and 0% from another so not sure how the two banks came to two vastly different answers... Your point still stands. Also gift cards would be nice as in hey get me a GOG card as opposed to a gift card to (insert store you would never use)
Post edited March 18, 2016 by cecil
avatar
cecil: PLEASE NO Insomnia sale... I HATE THEM... :-(
avatar
noncompliantgame: Ditto
avatar
haydenaurion: Uh thanks but no thanks, I prefer not to make it easier for hackers to steal my cash which is why I never save card info anywhere.
avatar
noncompliantgame: Ditto
Are you a pokemon or why you just post "Ditto" XD?

avatar
Zeyes: I can't help but wonder: All the people who clearly either didn't bother to read the news post all the way through or didn't understand what it said, these are the very people who believe they're equipped to do a better job protecting their own data than GOG will? Does not compute.
avatar
CARRiON.FLOWERS: I know, it's quite flabbergasting. Do people just read the thread title, and immediately start spewing their garbage based on that alone? Doesn't seem wise.

Have we reached a point where we are too lazy to stop and read? :P
I'm also surprised about the complains I read... people complains they save the credit card information, but they say it is not the case; they complain if GOG gets hacked they will lose money, but that's false because the token that is saved for transactions only works with the site and unless the thief and the legit user share the same IP address the transaction won't be accepted, specially if it is using the email verification.

Not sure why that's so difficult to understand.
avatar
blackbishop86: I'm also surprised about the complains I read... people complains they save the credit card information, but they say it is not the case; they complain if GOG gets hacked they will lose money, but that's false because the token that is saved for transactions only works with the site and unless the thief and the legit user share the same IP address the transaction won't be accepted, specially if it is using the email verification.
Do note that the IP address that was referred to isn't that of an individual user, but rather the address used by GOG itself (i.e. the payment processor will only accept a valid token if it's being sent by GOG's servers, not anybody else).
Post edited March 18, 2016 by Zeyes
high rated
I don't get it..GOG set they wouldn't do X, now they do Y and people are upset because they said they wouldn't do X?

It seems to me that this token system is a technical advance that has happened in recent times that allows GOG to give its customers the practical benefits they would have gotten from the GOG storing card details without GOG actually storing card details..is that correct?
Post edited March 18, 2016 by Kristian
I think the title of this post is very unfortunate because it makes people think card data is actually *stored* on the site.

It's not. It's all token based and can only be exploited if the bank's systems are hacked or the entire GoG backend is hijacked - but if that happens it's very very bad anyways, mkay?
Post edited March 18, 2016 by WinterSnowfall
"Once your bank approves the purchase, your entered card number is replaced with a unique, encrypted token that can be used only by us to process your future payments, and which cannot be reverse engineered to resolve your card number and data."

Nice. So basically store-individualized credit card information. That makes the system extremely safe.
Well, it seems like my card is getting a new home as of today! ;D

A great feature to have, especially now that all communication is going through https! Hear, hear! :D

Outstanding, GOG! :)

P.S. I can't wait for it "to be particularly useful soon"... ;D
Post edited March 18, 2016 by TheOneRaziel
avatar
Zeyes: I can't help but wonder: All the people who clearly either didn't bother to read the news post all the way through or didn't understand what it said, these are the very people who believe they're equipped to do a better job protecting their own data than GOG will? Does not compute.
avatar
CARRiON.FLOWERS: I know, it's quite flabbergasting. Do people just read the thread title, and immediately start spewing their garbage based on that alone? Doesn't seem wise.

Have we reached a point where we are too lazy to stop and read? :P
TL;DR

:-p
nice to have an option like that.
just a question: isnt steam using something like this?

i dont use steam that often, but i did notice they remembered i ordered using paysafe, and that option is always selected by default.

is steam by any chance already using that? cause i noticed that everyone likes 'to be like steam' and has things like big steam has.
For security it might be (very) good, but the few times i order something i always take my time to do it manually every single time.
I have no problem , am not in a hurry, i always take time to make a transaction, even if i had card i'd still be taking my time to manually transfer stuff, i am not in a rush and i dont have any particular place to go in a hurry.

Anyway, are people getting so 'lazy' they want all things to be done as fast and hasslefree as possibble? take the contact free payment: or the fingerprint payment? lazy , lazy lazy...

If you want to be certain things cant or will go wrong: take your time an do it by hand, cause easy does it.
About all paper things gonna be digital only: bad choice, cause when all is digital only people are prone to 'attacks' cause all info can be 'accessed' by shady people from the comfort of there own home sitting behind a laptop or desktop.
In the past you had tons of paperwork, no one in his right mind wanted to steal all those tons of heavvy papers, looking through the papers would take years, but with digital you can search for the thing you want.
Post edited March 18, 2016 by gamesfreak64
avatar
gamesfreak64: just a question: isnt steam using something like this?
No. Steam saves the full CC details, not use a token. Unless that has changed recently.
avatar
gamesfreak64: just a question: isnt steam using something like this?
avatar
JMich: No. Steam saves the full CC details, not use a token. Unless that has changed recently.
ow? i didn't know that for sure but now i do.
thanks for the information




i googled on : digital data only not safe


i found this: http://www.digitaltrends.com/computing/keeping-data-safe-eternity/

digital is cheap and fast.... but...

anyway, i know 900% sure that there will be lots of databreaches and many more records of peoples health and other privacy will be compromised because all goes digital.
People are gettin lazy and trust the digital data way to much, sure, an average computer user cant break a strong password or code or whatever, but the big bad guys can and will, all from the comfort of their homes.
Computers and digital storage should be used for games and other entertainment, but not storing sensitive data.
Mobiles and mails of government people have been compromised so many times (google for it)

Actually it is quite 'entertaining' that in their search for fast and easy access to any data they put all their sensitive (government) info in danger.
Post edited March 18, 2016 by gamesfreak64