Live data from Hacker News

Stripe increases price for business in the European Economic Area

support.stripe.com

11–20 of 237 posts

Re: Stripe increases price for business in the European Economic Area

#11
post #8
post #6

Earlier quoted context omitted.

It's not even slightly how it works, and your interpretation is correct, so long as the customer has consented then you're fine. The issue with Google Fonts and Analytics is that the customer has very rarely consented to tracking (particularly with fonts), and in a great many cases even where there is a "I consent to tracking cookies" dialog the cookies were dropped before it was displayed.

Sick of those stupid dialogs.

Sick of sites tracking me

Re: Stripe increases price for business in the European Economic Area

#12
It says something when traditional banks are basically the same price now and are almost as good in features (and many other card processors are cheaper, especially if eg you stick to a processor in the EU for EU cards) - I'm not sure why anyone would pick Stripe anymore, especially as they have just as many "hidden" costs as others (eg fraud stuff)

Re: Stripe increases price for business in the European Economic Area

#13
post #3

How can Europeans use Stripe when they can't use Google Fonts and Google Analytics on the grounds that sending even a single IP packet to a server under the control of a US company violates the GDPR?

One aspect of this is that data processing which is necessary to do what the customer explicitly requested is permitted (GDPR article 6.1.b). Making the payment for your purchase is such a thing and this processing is lawful, but doing analytics or tracking who viewed the site through fonts is not, and generally requires explicit opt-in consent.

Re: Stripe increases price for business in the European Economic Area

#14
post #3

How can Europeans use Stripe when they can't use Google Fonts and Google Analytics on the grounds that sending even a single IP packet to a server under the control of a US company violates the GDPR?

In theory, they can't. But no one is enforcing it because there is a plan to change the law.

Re: Stripe increases price for business in the European Economic Area

#15
I don't know how Stripe can justify these pricing, except for "oh we can extract more money, let's do that!". In other (non-Western) countries pricing for local payment systems can be less than half of what Stripe charges, e. g. Alipay (one of the biggest Chinese payment services) charges about 0.55% merchant fee without per-transaction cost.

Re: Stripe increases price for business in the European Economic Area

#16
post #5
post #3

How can Europeans use Stripe when they can't use Google Fonts and Google Analytics on the grounds that sending even a single IP packet to a server under the control of a US company violates the GDPR?

Is that how it works? I thought as long as the user gives explicit consent to that happening it's fine. Most checkouts I have seen have a checkbox you need to check before being redirected to stripe/paypal and the likes which asks for explicit consent to the privacy policy rules.

The issue is, giving a US org data is considered a transfer of data to that the US since a US court can force a US org to turn over the data no matter where in the world it is located. US data laws are not compliant with GDPR. It's basically just down to the spy laws they have, for FISA letters I believe, without those they would be fine.

Re: Stripe increases price for business in the European Economic Area

#17
post #15

I don't know how Stripe can justify these pricing, except for "oh we can extract more money, let's do that!". In other (non-Western) countries pricing for local payment systems can be less than half of what Stripe charges, e. g. Alipay (one of the biggest Chinese payment services) charges about 0.55% merchant fee without per-transaction cost.

Why don't Stripe customers shift to Alipay? I don't know anything about the service, but that seems like a pretty straightforward win, if they're as similar as you suggest.

Re: Stripe increases price for business in the European Economic Area

#18
post #6
post #5

Earlier quoted context omitted.

Is that how it works? I thought as long as the user gives explicit consent to that happening it's fine. Most checkouts I have seen have a checkbox you need to check before being redirected to stripe/paypal and the likes which asks for explicit consent to the privacy policy rules.

It's not even slightly how it works, and your interpretation is correct, so long as the customer has consented then you're fine. The issue with Google Fonts and Analytics is that the customer has very rarely consented to tracking (particularly with fonts), and in a great many cases even where there is a "I consent to tracking cookies" dialog the cookies were dropped before it was displayed.

With Google Font decisions have been about consent. With Google Analytics it's been about the transfer of data to a US org when a US court can issue a FISA letter. Basically, a privacy lawyer from the Netherlands has been hammering Google in court repeatedly.

Re: Stripe increases price for business in the European Economic Area

#19
post #5
post #3

How can Europeans use Stripe when they can't use Google Fonts and Google Analytics on the grounds that sending even a single IP packet to a server under the control of a US company violates the GDPR?

Is that how it works? I thought as long as the user gives explicit consent to that happening it's fine. Most checkouts I have seen have a checkbox you need to check before being redirected to stripe/paypal and the likes which asks for explicit consent to the privacy policy rules.

The issue is not related to consent but to "safeguards".

GDPR requires that user data is guarded in certain ways, and European courts have ruled that no data can be sufficiently safeguarded if it is under control of a US company.

Google "analytics gdpr safeguards" or see here for example:

https://piwik.pro/blog/is-google-analytics-gdpr-compliant/

Especially the section "Does collecting visitors’ consent solve compliance issues with Google Analytics?".

Re: Stripe increases price for business in the European Economic Area

#20
post #8
post #6

Earlier quoted context omitted.

It's not even slightly how it works, and your interpretation is correct, so long as the customer has consented then you're fine. The issue with Google Fonts and Analytics is that the customer has very rarely consented to tracking (particularly with fonts), and in a great many cases even where there is a "I consent to tracking cookies" dialog the cookies were dropped before it was displayed.

Sick of those stupid dialogs.

I find them to be good indicators of how bad a website/service is. The harder it is to dismiss the dialog while rejecting everything, the worse the service tends to be in other metrics. I think of those dialogs as big bright banners which advertise loud and clear how disrespectful a website is of its users. Noticing the pattern means I waste considerably less time on websites which aren’t worth it.
Post reply on HN