Well it doesn't have to be a 'csv' file, it can be another type of file...so long as when a 'pin number' is returned to the customer via broswer or email..that that number is then deactivated from the server 'storage file'.