# Subscriptions automatically sets two cookies before login

**URL:** https://meta.discourse.org/t/subscriptions-automatically-sets-two-cookies-before-login/297065
**Category:** Support
**Tags:** gdpr, subscriptions
**Created:** [February 20, 2024, 3:10am UTC](https://meta.discourse.org/t/subscriptions-automatically-sets-two-cookies-before-login/297065 "2024-02-20T03:10:14Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![oddjobz](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/oddjobz/32/364342_2.png) [@oddjobz](https://meta.discourse.org/u/oddjobz)
#### Post date: [February 20, 2024, 3:10am UTC](https://meta.discourse.org/t/subscriptions-automatically-sets-two-cookies-before-login/297065/1 "2024-02-20T03:10:14Z")

</div>

Hi, I wonder if someone could advise. I added the subscriptions plugin and set it up with a Stripe account, looks great and seems to work well. However I noticed that Stripe seems to set two cookies as soon as someone hits the Forum, even before they log in. (which seems to be a potential GDPR issue)

Can’t see any options anywhere in subscriptions or on stripe to control this.

Am I doing something wrong, or is there a way to tweak this so it doesn’t add cookies before someone has logged in? (I did try clean / logged out browsers, same issue)

tia

---

<div class="post-metadata">

### Author: ![MarkDoerr](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/markdoerr/32/549630_2.png) [@MarkDoerr](https://meta.discourse.org/u/MarkDoerr)
#### Post date: [February 28, 2024, 5:29pm UTC](https://meta.discourse.org/t/subscriptions-automatically-sets-two-cookies-before-login/297065/2 "2024-02-28T17:29:23Z")

</div>

According to Stripe, they [set cookies for Fraud Protection](https://stripe.com/cookie-settings) which [do not require consent under GDPR](https://github.com/stripe/react-stripe-js/issues/367#issuecomment-1368483493).

---

<div class="post-metadata">

### Author: ![oddjobz](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/oddjobz/32/364342_2.png) [@oddjobz](https://meta.discourse.org/u/oddjobz)
#### Post date: [February 28, 2024, 7:06pm UTC](https://meta.discourse.org/t/subscriptions-automatically-sets-two-cookies-before-login/297065/3 "2024-02-28T19:06:50Z")

</div>

Hi, thanks for that .. might be something to include in the Privacy Policy for sites using subscriptions?
