Cookie Policy
Last updated: April 28, 2020
This cookie policy describes how Stripe (“Stripe”) uses “cookies” and other similar technologies, in connection with our Site and Services. Any capitalized term used and not otherwise defined below has the meaning assigned to it in the Privacy Policy.
1. What is a Cookie?
Cookies are small text files that are stored in a computer’s browser directory. They help site providers with things like understanding how people use a site, remembering a User’s login details, and storing site preferences.
2. Does Stripe use Cookies?
Yes. We use cookies in accordance with our Privacy Policy to:
- ensure that our Services function properly,
- detect and prevent fraud,
- understand how visitors use and engage with our Site, and
- analyze and improve Services.
3. Who sets cookies when I use Stripe’s Site?
There are two main types of cookies that can be set:
- First party cookies: these cookies are placed and read by Stripe directly when you use our Services,
- Third party cookies: these cookies are not set by Stripe, but by other companies, like Google, for site analytics purposes. See further details below on how to manage these cookies.
4. How Stripe Uses Cookies?
Cookies play an important role in helping us provide effective and safe Services. Below is a list of commonly used cookies and the purposes that apply to them. This list is not exhaustive, and describes the main reasons why we typically use cookies.
Necessary Cookies
Some cookies are essential to the operation of our Site and Services and make it usable and secure by enabling basic functions like page navigation and access to secure areas of the Site. We use those cookies in a number of different ways, including:
- Authentication. To remember your login state so you don’t have to log in as you navigate through our Site and dashboard.
- Fraud Prevention and Detection. Cookies and similar technologies that we deploy through our Site help us learn things about computers and web browsers used to access the Services. This information helps us monitor for and detect potentially harmful or illegal use of our Services. For example, in order to process payments transactions for our Users, it is necessary for Stripe to collect information about the transaction and the Customer. To help secure these transactions and minimize fraud, we collect additional information through the use of cookies and other technologies in helping to identify bad actors and prevent them from making fraudulent transactions. Customers should check our Users’ sites for more information about the use of Stripe cookies for fraud detection.
- Security. To protect user data from unauthorized access.
| Domain | First or Third Party | Cookie Name | Description | Expiration |
|---|---|---|---|---|
| stripe.com (this applies to webpages served by stripe.com like dashboard or docs)
m.stripe.com (common cookie, applies to both stripe.com and merchant domain that includes stripe.js) |
first party | __stripe_mid (or "muid"; part of stripe.js) | Fraud prevention and detection | 1 year |
| first party | __stripe_sid (or "sid"; part of stripe.js) | Fraud prevention and detection | 30 mins | |
| third party | m (or "guid"; part of stripe.js) | Fraud prevention and detection | 2 years | |
| Merchant domain (applies when a merchant includes stripe.js on a page) m.stripe.com (common cookie, applies to both stripe.com and merchant domain that includes stripe.js) |
first party | __stripe_mid (or "muid"; part of stripe.js) | Fraud prevention and detection | 1 year |
| first party | __stripe_sid (or "sid"; part of stripe.js) | Fraud prevention and detection | 30 mins | |
| third party | m (or "guid"; part of stripe.js) | Fraud prevention and detection | 2 years | |
| stripe.com | first party | session | Login session for Stripe Dashboard | Up to 90 days |
| stripe.com | first party | lsession | Login session for Stripe Express Dashboard for Stripe Express Users | 7 days |
| stripe.com | first party | stripe.csrf | Cross-site request forgery protection for Stripe Dashboard Users | 1 year |
| stripe.com | first party | cliauth_secret | Used to confirm authentication for the Stripe CLI | Session |
| stripe.com | first party | art_token/ cbt_token/ cct_token/ cdt_token/ect_toksvt_token/ lc_ token/prt_token/ act_token | Used to confirm authentication for - account recovery/ change of bank account/ login challenge/password reset/ support request/adding an email/new device | Session |
| google.com | third party | NID | Used by reCAPTCHA, an additional security measure that is sometimes used when logging in to Stripe. | 6 months |
Last updated: April 28, 2020
Preference Cookies
Preference cookies are used by Stripe to remember your preferences and to recognize you when you return to our Services.
| Domain | First or Third Party | Cookie Name | Description | Expiration |
|---|---|---|---|---|
| stripe.com | first party | locale | Localization setting for language to use for the Site and docs | Session |
| stripe.com | first party | country | Country localization settings to adjust product and features availability | Session |
| stripe.com | first party | lang | Programming language to use for the code examples in Stripe's docs | 1 year |
| stripe.com | first party | has_intentionally_selected_curl | Show the code examples in curl in Stripe's docs | 1 year |
| stripe.com | first party | persisted-tab-#{id} | Remembers which tab of the docs you are on between page refreshes | 1 year |
| stripe.com | first party | disable_cmd_f_override | Disable Stripe's docs search cmd+f/ctrl+f shortcut and use the browser default behavior (search the current page) instead | 1 year |
| stripe.com | first party | double_cmd_f_uses | Tracks use of the cmd+f/ctrl+f shortcut in Stripe's docs. Used to improve UX by not telling Users about a feature they have already used | 1 year |
| stripe.com | first party | expanded-topics | Remembers which topics are expanded in Stripe's docs between page refreshes | 1 year |
| stripe.com | first party | checkout-test-session / checkout-live-session | Used to power Legacy Checkout's Remember Me function | 1 year |
Last updated: April 28, 2020
Analytics Cookies
Analytics cookies help us understand how visitors interact with our Services. We use those cookies in a number of different ways, including:
- Site Features and Services. To remember how you prefer to use our Services so that you don’t have to reconfigure your settings each time you log into your account.
- To Analyze and Improve Our Services. To make our Site and Services work better for You. Cookies help us understand how people reach our Site and our Users’ sites. They give us insights into improvements or enhancements we need to make to our Site and Services.
- Pixel tags (also known as web beacons and clear GIFs). May be used in connection with some Services to, among other things, track the actions of Users (such as email recipients), measure the success of our marketing campaigns and compile statistics about usage of the Services and response rates.
- Third Party Analytics. Through Google Analytics in order to collect and analyze information about the use of the Services and report on activities and trends. This service may also collect information regarding the use of other sites, apps and online resources. You can learn about Google’s practices on the Google website. See further details below on how to manage these cookies.
| Domain | First or Third Party | Cookie Name | Description | Expiration |
|---|---|---|---|---|
| stripe.com | third party | _ga _gat _gat_UA-12675062-5 _gid |
Google Analytics cookies used for analytics and service improvement | 2 years 1 minute 1 minute 1 day |
| stripe.com | first party | cid | Stripe analytics "client ID" used for service improvement | Session |
| stripe.com | first party | site_sid __stripe_id |
Stripe "session ID" used for analytics and service improvement | 2 hours 30 mins |
| stripe.com | first party | __stripe_orig_props | Used to measure the effectiveness of marketing campaigns | 1 year |
| runkit.com | third party | __utma __utmb __utmc __utmt __utmz |
Runkit's Google Analytics | 2 years 1 hour Session 10 mins 6 months |
| marketo munchkin | third party | _mkto_trk | Tracks page visits and email campaign effectiveness | 2 years |
| third party | muc | Stripe Atlas Twitter marketing campaigns | 1 year |
Last updated: April 28, 2020
Advertising Cookies
We and our service providers will use cookies and similar technologies on Stripe.com to direct Stripe ads to you through targeted advertisements for Stripe Services on other sites you visit and to measure your engagement with those ads.
| Domain | First or Third Party | Cookie Name | Description | Expiration |
|---|---|---|---|---|
| facebook.com | third party | _fbp | Facebook advertising | 3 months |
| facebook.com | third party | fr | Facebook advertising | 3 months |
| linkedin.com | third party | bcookie bscookie lang Li_sugr lidc UserMatchHistory |
LinkedIn advertising | 1 year 1 year 1 day 2 years 2 years 2 years |
| google.com | third party | IDE | Google advertising | 2 years |
| linkedin.com | third party | Lidc Li_sugr |
LinkedIn Marketing Solutions Insights Tag | 1 day 90 days |
Last updated: April 28, 2020
5. Can I opt-out?
Yes, with the exception of those cookies that are necessary to provide you with our Services. Your web browser may allow you to manage your cookie preferences, including to delete and disable Stripe cookies. You can take a look at the help section of your web browser or follow the links below to understand your options. If you choose to disable cookies, some features of our Site or Services may not operate as intended.
- Chrome: https://support.google.com/chrome/answer/95647?hl=en
- Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
- Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
- Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies