it's a 3rd party, yes but much more secure imo to use a unique card for each account (when possible) in cases of merchant data breach. i.e. your data can not be linked to you when it's sold/shared on the dark web