The service keeps customer payment information private from the retailer by replacing the customer's credit or debit card Primary Account Number ( PAN ) with a tokenized Device Account Number ( DAN ), and creates a " dynamic security code [ . . . ] generated for each transaction ".