I know, I was going to add a disclaimer, but didn't bother.

I said "do you?", because I know that some do it.
- Amazon, for example, records my cc number.

I have read about methods of storing cc numbers by using a machine behind a firewall, which the cgi server can access, but can't itself be accessed directly from the internet.
I don't know all the implications/applications of this, so that's why I didn't go into it.
(and don't really want to still ;)