Page MenuHomeMiraheze

Review Stripe CSP Entry
Closed, ResolvedPublic

Description


CSP REVIEW

  • Is the site equipped with a privacy policy? Yes
  • Does the site attempt to comply with the GDPR? Can European Union inhabitants invoke their individual rights? Yes, see PP
  • Does the site provide a list of personal data being collected by using the service? Yes. see PP
  • Is the website owner known to have a bad reputation regarding privacy? No
  • Can wikis use the external service, even if the visitor wants to deny any cookies or other form of tracking? Unclear
  • Will wikis stay usable, even if the visitor blocks the external resource by using an ad blocker? Likely yes
  • Is there a Data Protection Officer and/or Privacy Team that can be contacted by Miraheze? Yes. dpo@stripe.com
  • Is the site equipped with a security policy? Yes
  • Does the site clarify their security measures to protect collected user data? Can the site assure measures are being taken to protect code injection into the loaded external resources? Yes, see Security policy above and Privacy Policy
  • Is the website owner known to have a bad reputation regarding information security? No
  • Is there a Chief Information Security Officer and/or Security Team that can be contacted by Miraheze? Should be able to contact them via general support

Event Timeline

John triaged this task as Normal priority.Aug 28 2021, 19:21
John created this task.
Reception123 moved this task from SRE Review to T&S Review on the CSP Review board.
Reception123 subscribed.

Review would pass in my opinion, Stripe appears to be serious about privacy and security, especially since it's in Finance. Passing on to T&S review.

Owen subscribed.

Financial institutes require a degree of privacy and security that is heavily regulated, to a much higher standard than GDPR.

John claimed this task.
John moved this task from DSRE Review to Completed on the CSP Review board.