Stripe · Stripe Privacy Policy

Device and Behavioral Data Collection via Cookies and Tracking

Medium severity
Share 𝕏 Share in Share

What it is

Stripe tracks your device, browser, IP address, and browsing behavior across its services using cookies and similar technologies, using this data for analytics and fraud detection.

Consumer impact (what this means for users)

Stripe collects device fingerprint data, IP address, and browsing patterns even from visitors to its sites and End Customers completing checkouts, creating behavioral profiles that may persist beyond any individual transaction.

How other platforms handle this

GitHub Medium

Our Services are not intended for individuals under the age of 13. We do not intentionally gather Personal Data from such individuals. If you become aware that a minor has provided us with Personal Data, please notify us.

PayPal Medium

Geolocation data: Such as Global Positioning System ("GPS"), which we may collect with your consent if you have an account for financial Services, and IP-based geolocation data during your user experience or based on your mobile application settings... If you agree to let us track your precise geolo...

Shopify Medium

We use cookies and similar tracking technologies on our website, including to track information about your use of our website and to serve targeted advertisements. We work with third-party analytics and advertising companies that set cookies on our website and may track information about your online...

See all platforms with this clause type →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Behavioral tracking extends beyond what most consumers expect from a payment processor — your browsing activity, not just payment data, is monitored and used to build profiles for fraud detection and product analytics.

View original clause language
We collect information about your device, browser, and how you interact with our Services, including through cookies, web beacons, pixels, and similar tracking technologies. This includes your IP address, device identifiers, browser type and version, operating system, referring URLs, pages visited, and time spent on pages. We use this information for analytics, fraud detection, and to improve our Services.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: Cookie and tracking data collection implicates GDPR Art. 6 and the EU ePrivacy Directive (2002/58/EC, as amended) requiring prior informed consent for non-essential cookies; UK PECR (Privacy and Electronic Communications Regulations 2003); CCPA/CPRA definitions of 'sensitive personal information' for precise geolocation and device identifiers; and FTC Act Section 5 for deceptive tracking practices.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    Tracking and behavioral profiling without adequate consumer notice implicates FTC Act Section 5 and CCPA enforcement coordination.
    File a complaint →

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CAN-SPAM
United States Federal
DMA
European Union
FCRA
United States Federal
GDPR
European Union
GLBA
United States Federal
HIPAA
United States Federal
TCPA
United States Federal
UK GDPR
United Kingdom

Provision details

Document information
Document
Stripe Privacy Policy
Entity
Stripe
Document last updated
March 24, 2026
Tracking information
First tracked
March 15, 2026
Last verified
April 9, 2026
Record ID
CA-P-002345
Document ID
CA-D-00106
Evidence Provenance
Source URL
Wayback Machine
SHA-256
87ac9fcdb4b3be9c7831662daf59f5425643d84690f687c3e918ab83a226dd37
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Stripe | Document: Stripe Privacy Policy | Record: CA-P-002345
Captured: 2026-03-15 11:47:00 UTC | SHA-256: 87ac9fcdb4b3be9c…
URL: https://conductatlas.com/platform/stripe/stripe-privacy-policy/device-and-behavioral-data-collection-via-cookies-and-tracking/
Accessed: April 29, 2026
Classification
Severity
Medium
Categories

Other provisions in this document

Related Analysis