5 ms·

It looks like GA is being loaded in the Pay iframe.

• edwinwee 4y ago
  (Edwin from Stripe here.) This is correct. I can only speak to how Stripe.js works but if a business chooses to accept Google Pay, we've limited it to loading in an iframe. (We don't load Google scripts on the business's domain.)
• counttheforks 4y ago
  If website A embeds website B in an iframe and website B loads Google Analytics, does website A have to show a cookie consent form? Or does website B have to show a cookie consent form inside of the iframe? Does stripe display such a consent form in the iframe?
  • jefftk 4y ago
    My understanding of GDPR and e-Privacy as it applies to a payment iframe like we're talking about here is that site A would get consent for B as a payment processing vendor, and then B would have a contract with A ("DPA") that ensures it doesn't do things outside of what A will be getting agreement for. In this case, I don't see how B running analytics JS is beyond what A already needs to be getting consent for. (I used to work in this general area, but don't anymore.)
  • deleted 4y ago
    [deleted]