@blenderdumbass @samurro It's quite easy to handle payment processing legally - you just need to be a registered company that operates legally.

Although, credit card providers demand ridiculous things, like payment only being carried out by their proprietary software (when a credit card transaction should just be a TLS-encrypted HTTP POST request, with the numbers and transaction amount right in the headers, but of course not).

The FSF uses CivicCRM, which can collect the credit card details without even requiring JavaScript and send them off to the processing server over TLS.