FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

WooCommerce PayPal Payments

PreferencesOfficial website

WooCommerce PayPal Payments is a WordPress plugin that integrates PayPal payment processing into WooCommerce stores. It enables PayPal Checkout, credit/debit card payments, and Pay Later options. The plugin loads the PayPal JavaScript SDK which sets cookies for fraud prevention, session management, and payment processing. Transaction data is processed on PayPal's US based infrastructure.

Block WooCommerce PayPal Payments until consentScan my site
Overview

What does WooCommerce PayPal Payments do?

What Is WooCommerce PayPal Payments?

WooCommerce PayPal Payments is a WordPress plugin that integrates PayPal payment processing into WooCommerce stores. It supports PayPal Checkout, credit/debit card payments (via PayPal), and Pay Later options. The plugin loads the PayPal JavaScript SDK on checkout pages, which sets cookies for fraud prevention, payment session management, and transaction tracking.

Data, GDPR and Compliance

PayPal processes sensitive financial data including card details (never stored on the merchant server), billing addresses, transaction amounts, and buyer identity. PayPal acts as an independent controller or joint controller depending on the payment flow. PayPal provides a DPA, is PCI DSS Level 1 certified, and participates in the EU US Data Privacy Framework. Legal basis: contract performance for payment processing. PayPal fraud prevention cookies may be classified as strictly necessary. Steps: reference PayPal in your privacy policy, document PayPal as a data recipient, implement cookie consent for non essential PayPal cookies, configure WooCommerce data retention, ensure PCI DSS compliance for your store.

Compliance

WooCommerce PayPal Payments and the GDPR

WooCommerce PayPal Payments is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Contract performance for payment processing (Art. 6(1)(b)), consent for PayPal tracking cookies and fraud prevention cookies (Art. 6(1)(a))
Risk level
high
Applicable regulations
GDPR, ePrivacy, UK GDPR, PCI DSS, PSD2

Impact assessment (DPIA)

DPIA recommended due to financial data processing. Assess: payment data categories (card details handled by PayPal, order details on WooCommerce), PayPal SDK cookies and fraud prevention, buyer personal data (name, address, email), PayPal's US processing, PCI DSS scope.

Sample text for your banner

This store uses PayPal for payment processing via WooCommerce. PayPal may set cookies for fraud prevention and payment session management. Payment data is processed on PayPal servers. By proceeding with payment, you consent to PayPal's data processing.
Cookies and trackers

What WooCommerce PayPal Payments sets and contacts

Tracking method
server side WordPress/WooCommerce plugin, PayPal JavaScript SDK, payment cookies, transaction data, buyer information
Server location
Self hosted (WordPress) + PayPal infrastructure (US/Global)
Data transferred outside the EU
WooCommerce is by Automattic (US). PayPal is headquartered in San Jose, US. Payment data is processed by PayPal on its global infrastructure. PayPal provides a DPA with SCCs and is certified under the EU US Data Privacy Framework.

Cookies set (5)

NameTypeDurationPurpose
tssecurity3 yearsPayPal fraud prevention cookie collecting device and browser information.
ts_csecurity3 yearsPayPal fraud prevention cookie timestamp for security checks.
x-pp-sfunctionalitySessionPayPal payment session cookie maintaining checkout state.
enforce_policyfunctionality1 yearPayPal cookie enforcing regional payment policies.
nsidfunctionalitySessionPayPal session identifier for payment processing.

Third-party domains contacted (4)

  • www.paypal.com
  • www.paypalobjects.com
  • api.paypal.com
  • t.paypal.com
Questions

Frequently asked questions about WooCommerce PayPal Payments

Can't find your question? Write to us, we answer fast.

Cookies?

PayPal SDK sets ts, ts_c (fraud prevention), x-pp-s (session), enforce_policy, and login_email cookies from paypal.com and paypalobjects.com domains.

Consent?

PayPal fraud prevention cookies are arguably strictly necessary for payment security. Analytics cookies from PayPal need consent. The PayPal button itself loads the SDK which sets cookies.

Legal basis?

Contract performance (Art. 6(1)(b)) for payment processing. Legitimate interest for fraud prevention. Consent for marketing cookies.

Transfers?

Yes. PayPal is US based. Transaction data processed on PayPal infrastructure globally. PayPal provides DPA with SCCs and is Data Privacy Framework certified.

DPIA?

Recommended due to financial data processing. Assess payment flows, data shared with PayPal, fraud prevention scope.

Compliance?

Reference PayPal in privacy policy. Document as data recipient. Implement cookie consent. Configure WooCommerce retention. Ensure PCI DSS compliance.

Alternatives?

Stripe (with EU entity), Mollie (Netherlands), Adyen (Netherlands), GoCardless (UK), or bank transfer/SEPA direct debit for EU only payment flows.

Cookie policy?

List PayPal cookies (ts, ts_c, x-pp-s, enforce_policy) with purposes and durations. Specify paypal.com and paypalobjects.com domains. Note fraud prevention classification.

Same category

More services: E-commerce

See the whole category

Planyo

Planyo is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Planyo provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Planyo helps deliver the right message to the right audience at the right time.

Preferences

Aphix

Aphix is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Aphix supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Aphix ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Avangate

Avangate is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Avangate supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Avangate ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Kickflip

Kickflip is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Kickflip provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Kickflip helps deliver the right message to the right audience at the right time.

Preferences

Moori

Moori is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Moori integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Moori helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Sky Pilot

Sky Pilot is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Sky Pilot supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Sky Pilot ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site