What is the __stripe_orig_props cookie?
__stripe_orig_props is an HTTP cookie set by Stripe, one of the most widely used online payment processors worldwide. It appears on a site when that site integrates Stripe.js, Stripe Elements, Stripe Checkout, or Stripe Link to process payments.
The cookie is placed by the Stripe script loaded within the payment page or checkout components, not by the site itself. It does not appear on pages that contain no Stripe payment element.
What data it stores
The cookie stores technical information related to the payment session and the context in which the transaction was initiated, used by Stripe to assess fraud risk. The exact value format is not publicly documented by Stripe and may vary.
Data collected through this cookie is sent to Stripe's servers, not to the site hosting the payment form. The site owner does not have direct access to the cookie's content.
What it is used for
The cookie's main purpose is fraud prevention during payment processing: Stripe uses signals from the checkout session to detect suspicious behavior (for example, repeated payment attempts with different cards) and to protect both merchants and their customers.
Indirectly, the cookie supports the correct functioning of the payment flow — without it, some of Stripe's anti-fraud checks may be affected, potentially causing declined or delayed transactions.
Does it require consent?
In CookieFix's classification, __stripe_orig_props is marked as strictly necessary. Cookies of this type are exempt from the prior consent requirement under the ePrivacy Directive (transposed in Romania through Law 506/2004), because they are indispensable for completing a transaction explicitly requested by the user.
- Does not require prior consent to be set.
- Must still be disclosed in the site's cookie policy, in line with GDPR transparency requirements.
- The site owner should also review Stripe's data processing terms (DPA), not just the cookie aspect.
How to block or delete __stripe_orig_props
A visitor can delete or block this cookie from browser settings (for example, the "Privacy and security" section in Chrome, Firefox, or Edge). Blocking it, however, may disrupt payment completion or trigger extra security checks from Stripe.
For site owners, a consent management platform like CookieFix automatically classifies __stripe_orig_props as strictly necessary and does not block it before consent, precisely so the payment process isn't interrupted; meanwhile, other Stripe scripts used for marketing or analytics (if any) can still be blocked automatically until the relevant consent is given.
Frequently asked questions
No, it is not used for advertising tracking. Stripe uses it to help prevent fraud during online payment processing.
No, since it is classified as strictly necessary for completing the transaction, it is exempt from prior consent, but it must still be listed in the site's cookie policy.
Stripe's payment form may not work correctly, or Stripe may trigger additional security checks during checkout.
It is set directly by the Stripe script (Stripe.js/Elements/Checkout/Link) loaded on the payment page, not by the site's own code.