How to meet Stripe's privacy policy requirement for your website

By Paul Cranmer, Founder · Last verified October 2026 · Stripe Dashboard · website checklist, public business information

Stripe does not have a privacy policy URL field the way app stores do. Instead its website checklist says every business on Stripe should address a set of elements on its site, your website's privacy policy among them, and Stripe may review the site and ask for changes. This page shows what the checklist asks for, where Stripe shows your business details to customers, and what that means for a Connect platform and its connected accounts.

Who this is for

Businesses activating a Stripe account whose site has no privacy policy yet
Connect platforms onboarding connected accounts who ask what their site needs
Anyone Stripe contacted about website clarity, policies or contact details

Not for

Stripe Apps listed in the App Marketplace (that listing has its own privacy policy field)
Card-network legal advice; Stripe's checklist points at the Visa, Mastercard, Amex and Discover rules

What the platform requires

Stripe's website checklist lists the common elements each business on Stripe should address on its website, including your website's privacy policy: clearly explaining it helps you comply with privacy laws and helps customers understand how their data is protected, used or disclosed.
The same checklist asks for a description of what you sell, the purchase currency, customer service contact information (email, phone or live chat, not only a form), fulfillment policies (refund, shipping, return, cancellation), legal or export restrictions, your business address, promotion terms, security and PCI wording, and accepted card logos.
Stripe says the guidelines are based on card network rules and that if it reviews your website and finds unclear descriptions, missing contact options or insufficient fulfillment policies it may contact you and ask for changes.
When you verify your business, Stripe collects public business information customers see on card statements and receipts: business name and website URL, support email, phone and address, support site URL and statement descriptor; you can update it any time in Account settings.
Connect onboarding (Stripe-hosted, embedded or API) collects the connected account's business details for verification; the checklist applies to each business's own website, so a platform should tell connected accounts what their site must show.

Get a live URL first

Websites are on the hosted plan: create a hosted privacy policy URL here and link it from your site footer and checkout page, so the checklist item is met with a page that loads without a login and never moves.

Get a hosted privacy policy URL

Step-by-step: paste your privacy policy URL

Open Stripe's website checklist. Go through docs.stripe.com/get-started/checklist/website. Tick what your site already has: product descriptions, currency, contact methods, fulfillment policies, privacy policy, address, promotion terms, security wording, card logos.
Publish the privacy policy page. Put the policy on a public page of your own site, or host it here and link it. It should say what you collect at checkout and through your forms, how you use and share it, and how to contact you.
Link it where customers look. Add the link to the footer of every page and near the payment form or checkout. Stripe's checklist groups it with the other policies customers need before they pay.
Check your public business information. In the Stripe Dashboard, open Account settings → Public details. Make sure the business name, website URL, support email, phone, address and statement descriptor match the site that carries the policy.
For Connect platforms, pass the checklist on. Whether you use Stripe-hosted, embedded or API onboarding, each connected account's own website is what the checklist applies to. Link this page or Stripe's checklist in your onboarding so accounts add their policy and contact details before they go live.

Field labels to look for

Website checklist: Stripe's list of what each business's website should address; checkbox state is stored in your browser.
Account settings → Public details: Business name, website URL, support contact and statement descriptor shown to customers.
Connect onboarding: Stripe-hosted, embedded or API; collects the connected account's business details for verification.

Common reasons the form fails

A site with no privacy policy or one hidden behind a login
Contact details limited to a form, with no email, phone or chat
Fulfillment policies missing for a business that ships or refunds
A website URL in Stripe's public details that points to a page without the policy

What the checklist is and is not

Stripe's checklist says it is your responsibility as an online merchant to comply with the card network rules it is based on, and it links the Visa, Mastercard, American Express and Discover rules. The privacy policy item is one of several; the contact and fulfillment items are the ones Stripe says it may ask you to fix after a review.

Get a hosted privacy policy URL

FAQ

Does Stripe require a privacy policy URL?

Stripe's website checklist lists your website's privacy policy among the elements each business should address, alongside contact details and fulfillment policies, and says it may review your site. There is no single URL field as in app stores.

Where does Stripe show my website URL?

On card statements and email receipts, from the public business information you enter when verifying your business; update it in Account settings.

I run a Connect platform. Whose policy is it?

Each connected account's own website is what the checklist applies to. Tell accounts during onboarding what their site must show.

Can I host the policy somewhere else?

Yes. Link a hosted policy from your footer and checkout; the checklist cares that customers can find and read it.