Stripe · Stripe Privacy Policy

Passive Data Collection from Non-Account Holders

Medium severity
Share 𝕏 Share in Share

What it is

Depending on the context, 'you' might be an End Customer, End User, Representative, or Visitor... Personal Data refers to any information associated with an identified or identifiable individual, which can include data that you provide to us, and that we collect about you during your interaction with our Services (such as device information, IP address, etc.).

Why it matters

Millions of people who have never signed up for Stripe may have their data collected and profiled simply by checking out on a merchant website, without realizing Stripe is involved.

Consumer impact

Stripe collects extensive personal data — including device identifiers, IP addresses, browsing behavior, and inferred fraud risk scores — not only from direct Stripe users but also from individuals who simply complete a payment on any merchant site powered by Stripe, without ever creating a Stripe account. This data is shared with a broad ecosystem of Financial Partners, affiliates, and service providers for fraud prevention, compliance, and business improvement purposes, meaning your payment behavior may be profiled and shared across the financial system without your explicit awareness. You can exercise your rights to access, correct, delete, or restrict your data by visiting stripe.com/privacy-center or emailing privacy@stripe.com.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Visit stripe.com/privacy-center, navigate to the 'Your Privacy Rights' section, and submit a data deletion request. You may also email privacy@stripe.com directly.

Applicable agencies

  • FTC
    FTC Act Section 5 applies to unfair or deceptive data collection practices affecting consumers who have not directly contracted with Stripe.
    File a complaint →

Provision details

Document information
Document
Stripe Privacy Policy
Entity
Stripe
Document last updated
March 24, 2026
Tracking information
First tracked
March 15, 2026
Last verified
April 4, 2026
Record ID
CA-P-001875
Document ID
CA-D-00106
Evidence Provenance
Source URL
Wayback Machine
SHA-256
87ac9fcdb4b3be9c7831662daf59f5425643d84690f687c3e918ab83a226dd37
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Stripe | Document: Stripe Privacy Policy | Record: CA-P-001875
Captured: 2026-03-15 11:47:00 UTC | SHA-256: 87ac9fcdb4b3be9c…
URL: https://conductatlas.com/platform/stripe/stripe-privacy-policy/passive-data-collection-from-non-account-holders/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document