The donation call can be made from a non-Luminate hosted page but what should be avoided is capturing the information from the browser and then sending it to a proxy server that actually makes the API call. The API calls need to be made from the page and response received by the very same page. However the page can be hosted anywhere.