What is the __stripe_mid cookie?
Used by Stripe for fraud prevention on payment forms. Generally treated as strictly necessary where checkout is present.
Strictly necessary No consent needed
| Cookie name | __stripe_mid |
|---|---|
| Set by | Stripe |
| Category | Strictly necessary |
| Typical duration | 1 year |
| Domain | first-party |
| Consent required? | No — strictly necessary |
Does __stripe_mid need consent?
No. __stripe_mid is treated as strictly necessary — it exists so the site can function securely (sessions, security or fraud prevention), not to track you across the web. Strictly necessary cookies are exempt from the consent requirement under ePrivacy, so a site may set __stripe_mid without asking first. It should still be listed in the site's cookie policy.
Is __stripe_mid a tracking cookie?
Required for the site to work — sessions, security, load balancing, cart state. Exempt from consent under ePrivacy.
How to see and remove __stripe_mid
- See it: open your browser's developer tools → Application (Chrome/Edge) or Storage (Firefox) → Cookies, and look for
__stripe_mid. - Remove it: clear cookies for the site, or use your browser's "Clear browsing data" for cookies. It will reappear if you keep using the site and consent is in place.
- Stop it being set: decline non-essential cookies on the site's banner. On a compliant site, clicking "Reject all" prevents non-essential cookies (this one is necessary, so it may still appear).
Want to know which cookies your site sets — and whether any fire before consent? Scan it free and get the full list, categorised, with the ones that load too early flagged.
Fixing pre-consent cookies
If a scan shows tracking cookies loading before the visitor consents, the fix is a consent management platform (CMP) that blocks non-essential tags until the visitor agrees. Cookies.ie is our GDPR / ePrivacy CMP — EU-hosted, with a real one-click "Reject all" and consent logging. See the fix guide for pre-consent trackers.
Related cookies
__cf_bm— Cloudflarecf_clearance— CloudflarePHPSESSID— PHP (generic)JSESSIONID— Java / Jakarta (generic)
Cookie purposes and durations reflect vendor documentation and common consent databases as of 2026-06-25; a specific site may configure __stripe_mid differently. This is general information, not legal advice.