The next step is tokenization, where Stripe turns a credit card number, expiration date, and CVC into a single use token that your application can use later. Under the hood, Stripe is effectively storing the card details in its vault of card information for a small amount of time and handing you back a reference token so that your server never knows the real information.