Among startups and tech companies, Stripe seems to be the near-universal favorite for payment processing. When I needed paid subscription functionality for my new web app, Stripe felt like the natural choice. After integration, however, I discovered that Stripe’s official JavaScript library records all browsing activity on my site and reports it back to Stripe. This data includes: Every URL the user visits on my site, including pages that never display Stripe payment forms Telemetry about how the user moves their mouse cursor while browsing my site Unique identifiers that allow Stripe to correlate visitors to my site against other sites that accept payment via Stripe This post shares what I found, who else it affects, and how you can limit Stripe’s data collection in your web applications.