Payments
Is Klarna GDPR compliant?
Klarna may run before the visitor has agreed, because it does not store or read anything on the device that goes beyond what is strictly necessary. It still belongs in your privacy policy.
- Category
- Payments
- Needs consent
- No
- Leaves the EEA
- No
- Can be self-hosted
- No
- Recognised by
- klarna.com, klarnaservices.com
- Typical cookies
- klarna-*
What does Klarna do?
Buy-now-pay-later checkout from a Swedish provider, so processing stays in the EEA. On-site messaging widgets that advertise the option outside checkout go beyond what is necessary.
Does Klarna need consent?
No consent is needed for Klarna on its own, because it does not store or read anything on the device beyond what is strictly necessary. That is not a free pass: it must still be named in your privacy policy, and the request itself still reveals the visitor's IP address to the provider.
Does Klarna send data outside the EEA?
No. Klarna keeps processing inside the EEA, which removes the third-country question entirely. You still have to name it as a recipient in your privacy policy.
How do we detect Klarna?
We load your page in a real browser as a first-time visitor who clicks nothing, then look at what it contacted. Klarna is recognised by requests to klarna.com and klarnaservices.com, and we report whether it merely loaded or actually sent data, and whether it set a cookie before any choice was made.
Check your websiteThis describes the service as it is normally deployed. Your own configuration decides what actually happens, which is what a scan of your site shows. Not legal advice.