Klarna

Klarna

Klarna is a buy-now-pay-later and consumer financing service embedded in e-commerce checkouts. Scripts load payment option widgets displaying installment plans and financing offers to shoppers. Browser signals, purchase context, and session data are collected for real-time credit assessments. Sets cookies to maintain session state across the checkout flow.

Overview

Klarna is a Swedish fintech company that provides buy-now-pay-later (BNPL) financing and flexible payment options at e-commerce checkout. The Klarna widget appears on product pages (showing installment pricing) and checkout pages (offering pay-in-4, pay-later, and financing options). Klarna has integrated into hundreds of thousands of online stores worldwide, making it one of the most widely deployed alternative payment methods in e-commerce.

What This Script Does

Klarna embeds its payment options through the Klarna JavaScript SDK and on-site messaging widgets.

  • Scripts loaded:
    • js.klarna.com/web-sdk/v1/klarna.js — the Klarna Web SDK that initializes payment widgets and handles the checkout flow
    • Klarna On-Site Messaging (OSM) script loads on product and cart pages to display installment price breakdowns (e.g., "4 payments of $25.00")
  • Payment flow: At checkout, the Klarna widget opens an iframe or popup from klarna.com where the customer authenticates (via phone number/email), selects a payment plan, and completes a soft credit check. Klarna performs a real-time risk assessment using browser signals, purchase context, and the customer's Klarna history.
  • Cookies set:
    • Session cookies on the klarna.com domain for maintaining the payment flow state
    • The Klarna SDK may set first-party cookies on the merchant domain for session correlation and to remember the customer's selected payment method
  • Data collected: The SDK collects browser fingerprint signals (screen resolution, browser version, installed plugins, timezone), device identifiers, purchase amount, merchant identifier, and session data for fraud prevention and credit risk assessment. On product pages, the OSM widget reads the product price from the page to calculate installment amounts.
  • On-Site Messaging: The OSM widget is primarily a display component that shows pre-calculated payment plans. It loads asynchronously and renders price breakdowns without collecting personal data until the customer initiates a payment flow.

Consent & Compliance

Klarna falls under the essential consent category when integrated as a payment method at checkout.

Under GDPR and ePrivacy, Klarna's payment processing at checkout is a strictly necessary service explicitly requested by the customer when they select Klarna as their payment method. Session cookies required for the payment flow fall under the ePrivacy Directive's exemption. Klarna's collection of browser signals for fraud prevention during checkout is tied to the payment transaction. However, the On-Site Messaging widget on product pages sets cookies and loads scripts before any payment intent, which may require separate assessment. Klarna is headquartered in Stockholm and processes EU data under GDPR with no cross-border transfer concerns for EU customers.

Under CCPA/CPRA, Klarna's processing of personal information for credit assessment and fraud prevention during checkout is necessary for the requested financial service. Klarna's privacy notice addresses California consumer rights.

Should You Block This Without Consent?

No. Klarna is a payment service that customers explicitly select during checkout. Blocking it would remove a payment option and prevent customers from using installment financing. The checkout payment flow and its associated cookies are strictly necessary. For the On-Site Messaging widget on product pages, consider lazy-loading it or treating it under functional consent if your compliance posture requires distinguishing between checkout-essential and promotional payment messaging.

Is Klarna GDPR compliant?

Klarna's trackers are classified as essential (strictly necessary), so they are generally exempt from prior consent under the GDPR. You should still list them in your cookie policy and privacy notice so visitors know they are there.

Visit website

Consent Categories

Also Known As

klarnaklarna checkoutbuy now pay laterbnplklarna paymentsklarna widget

Industries

Programming and Developer SoftwareComputers Electronics and Technology

Tracked Domains (1)

klarna.comEssential

klarna.com is an essential domain operated by Klarna, used to keep the site working, including security, load balancing, and sessions.

Frequently Asked Questions

Related Vendors

Akamai Client-Side Protection
Akamai Client-Side Protection
Akamai Client-Side Protection is a script security solution that monitors third-party JavaScript for supply chain attacks and data skimming. A lightweight agent script observes the behavior of all scripts running on the page, detecting unauthorized data access and exfiltration attempts. Behavioral telemetry is transmitted to Akamai for analysis and alerting.
Twilio SMS
Twilio SMS
Twilio SMS is a programmable messaging API used to send and receive SMS and MMS messages. It operates as a backend service and does not directly embed scripts on end-user web pages. Phone numbers and message content are processed through Twilio's API. No browser-side cookies or tracking scripts are loaded on visitor-facing pages.
Datadog
Datadog
Datadog is an observability and monitoring platform for cloud infrastructure, applications, and logs. Browser SDK scripts instrument frontend JavaScript to capture errors, performance timings, and user sessions for Real User Monitoring. Used by engineering teams to diagnose production issues and monitor user experience metrics.
Okta
Okta
Okta is an enterprise identity and access management platform used for SSO, MFA, and user lifecycle management. Scripts and redirects handle authentication flows that validate user identity against Okta's identity provider before granting access to applications. Widely deployed in B2B SaaS and enterprise software products.
SAP Commerce Cloud
SAP Commerce Cloud
SAP Commerce Cloud is an enterprise e-commerce platform powering online storefronts and headless commerce deployments. Storefront scripts manage product catalog rendering, cart state, checkout flows, and user account management. Session cookies and browser storage are used to maintain cart persistence and authentication state across shopping sessions.
Dynatrace
Dynatrace
Dynatrace is an AI-powered observability platform for application performance monitoring and infrastructure management. Browser agents inject into page loads to collect Real User Monitoring data including JavaScript errors, resource timings, and user action traces. Used by operations and engineering teams to detect and diagnose performance degradations.

Manage consent for Klarna

ConsentStack automatically detects and manages Klarna trackers so your site stays compliant with global privacy regulations.