Plurchase uses a neat idea to act as a proxy for shopping sites. They don't seem to be storing passwords before sending them off to the actual sites (which is good). I hope it takes off. Good luck!
Also, since all of your actions go through them, they attach their affiliate codes to every purchase. It's a better way of bringing in revenue than littering your site with ads of teeth falling out.
Are they still active during the checkout? If they do that with credit card data then Visa is entitled to sue them for violating under PCI DSS at 500k per day of offense.
