COD only. No online payment is collected. Firebase order saving requires the correct Firestore security rules.