Skip to content
Get your privacy pages ready for launch

Updated 1 Oct 2026 against official Stripe guidance

Stripe: website requirements for account activation

Show what Stripe asks to see on your website before it activates payments: your business, your contact details and your refund and cancellation policies.

Submitting soon? Check that your privacy policy opens and names the tools your site uses.Check my policy

What reviewers check

  1. Business and offer are visible

    Stripe lists your business name and descriptions of the goods or services you offer, and says they must align with the information you gave Stripe.

    Official source: Stripe: Business website for account activation
  2. Contact and policies are published

    Stripe lists customer service contact details (phone, email, address, contact form or messaging), a refund and dispute policy, a cancelation policy if applicable, and a return policy if you sell physical goods.

    Official source: Stripe: Business website for account activation
  3. The page opens without a password

    The website must be accessible without a password. A staging site behind a login or a link that needs an account does not qualify.

    Official source: Stripe: Business website for account activation

Documented rejection risks

  1. Site and Stripe profile disagree

    If the business name or the products on the site differ from your Stripe account details, the information does not align with what Stripe asks for. Update one or the other before you submit.

    Official source: Stripe: Business website for account activation
  2. A policy that is only a link

    Stripe warns that card issuers can reject a checkbox that only contains a link as evidence that the customer saw your policies. Show the full policy before the purchase.

    Official source: Stripe: Dispute prevention best practices
  3. A statement name customers do not recognise

    Stripe recommends a statement descriptor with your website domain or business name, so customers recognise the charge. It must be 5 to 22 characters with at least 5 letters.

    Official source: Stripe: Dispute prevention best practices

Submission checklist

  1. Compare the site with your Stripe details

    Open your Stripe business details next to your homepage and pricing page. Use the same business name and describe the same products or services.

    Official source: Stripe: Business website for account activation
  2. Publish a way to contact you

    Add customer service contact details that work: an email address, phone number, postal address, contact form or messaging service. Link them from every page footer.

    Official source: Stripe: Business website for account activation
  3. Publish refund and cancellation policies

    Write your real refund and dispute policy, and your cancellation policy if customers subscribe. Describe what you actually do, and put each policy on a public page that customers can open before they pay.

    Official source: Stripe: Business website for account activation
  4. Add promotion terms and restrictions if they apply

    Stripe also lists the terms and conditions of any promotions, and legal or export restrictions if applicable. Write these sections yourself when they apply to you.

    Official source: Stripe: Business website for account activation
  5. Show the full policies at checkout

    Stripe suggests including the refund and cancellation policies in your terms of service, asking customers to agree, and showing the full text on the checkout page or in a pop-up instead of only a link.

    Official source: Stripe: Dispute prevention best practices
  6. Set a recognisable statement descriptor

    In your Stripe account settings, use your domain or business name as the statement descriptor (5 to 22 characters, at least 5 letters, without < > ' or ").

    Official source: Stripe: Dispute prevention best practices

Example

  1. Fictional app: Harbor Schedule

    Fictional input: Harbor Schedule sells a monthly subscription for a calendar app with Stripe Checkout. It has no physical goods and no promotions this month.

    Official source: Stripe: Business website for account activation
  2. Fictional page worksheet

    Fictional output: the pricing page names the plan and the price, the contact page gives a support email, and the terms page has Refunds and Subscriptions and cancellation sections. No return policy is needed because nothing ships.

    Official source: Stripe: Business website for account activation
  3. Write only what you do

    The example promises only refunds the owner will really give. A generous policy that support does not follow invites disputes; Stripe recommends clear policies and quick refunds.

    Official source: Stripe: Dispute prevention best practices
https://harbor.example/pricing
https://harbor.example/contact
https://harbor.example/terms#refunds

Frequently asked questions

  1. Does Stripe ask for a privacy policy here?

    The Stripe activation FAQ does not list a privacy policy. Other rules can still require one where you sell, and a checkout collects personal data. The free check shows the tools your site loads and whether your privacy policy names them.

    Official source: Stripe: Business website for account activation
  2. Can I use a social profile or an app instead?

    The FAQ mentions a business website, social media profile or mobile application, and asks for the full social media URL, not only a handle. The same information must still be visible there.

    Official source: Stripe: Business website for account activation
  3. Does tosgenerator check my refund policy?

    No. The free check compares your privacy policy with the tools your site loads. Write your refund and cancellation terms yourself, from what you actually do. Stripe suggests that customers see these terms before they pay.

    Official source: Stripe: Dispute prevention best practices

Guide changelog

  • Expanded reviewer checks, documented rejection risks, submission checklists, worked examples and sourced FAQs. Each requirement now links to its relevant official section.
  • Initial English and Spanish guides added with dated primary sources and fictional sample URLs.

Check your URLs before you submit

Reviewers open your links. Open them first: our free check reads your privacy policy page and compares it with what your site loads.

The check looks at

  • Whether your privacy policy page opens and we can read it
  • The tools, cookies and forms on your public pages
  • Whether your policy names the tools we identify, with evidence

It cannot check

  • Tools built into mobile apps
  • How your server handles data or deletion requests
  • Pages behind a login
  • What you told the platform in its own forms

Then test by hand

Test: open your site signed out in a private window. Find your business name, what you sell, a way to contact you, and your refund, dispute and cancellation policies. Each one must match what you told Stripe.

I have the link to my privacy policy

Optional. If you paste the direct link, we read that page instead of looking for it, so the check is more exact.

By scanning, you confirm that you own this website or are authorized to test it, and you agree to our Terms.

We show what we observed. A lawyer has not reviewed the results.