Global Cookie and Tracker Notice
Mastercard Global Cookie Notice
Effective Date: 09/09/2026
- Notice states an effective date of 09/09/2026 Legal Rights & Agreement Rules
Mastercard International Incorporated and its affiliates (collectively, “Mastercard”) respect your privacy.
- "Mastercard" means the company and its affiliates Legal Rights & Agreement Rules
This Global Cookie and Tracker Notice explains how Mastercard uses Cookies on websites, applications, and other online environments globally (“Sites”) and Email Trackers in emails we send.
- Notice covers Mastercard's own Sites and its emails Data Access & Collection
It should be read alongside information provided through our consent management tool or “cookie banner” (“Consent Tool”) on Sites. This Notice, together with our Consent Tool, explains the types of Cookies we use, why we use them, and the choices available to you. The Consent Tool provides the most current, Site-specific details, including the Cookies used on the corresponding Site.
- The Consent Tool gives the Site-specific cookie details Data Access & Collection
This Notice applies only to “Mastercard-provided Sites,” meaning Sites that Mastercard owns or operates and makes available directly to users. Sites provided by our clients or partners are outside the scope of this Notice unless the Consent Tool for that Site indicates that this Notice applies.
- Notice covers Mastercard's own Sites and its emails Data Access & Collection
If a Site is provided to you by one of our clients or partners, and the Consent Tool on that Site indicates that Mastercard manages Cookies and Trackers for the Site (but does not process any other Personal Information as controller), that client or partner acts as the data controller for all processing activities that do not involve the use of Cookies and Trackers.
- On some partner Sites the partner stays the data controller Legal Rights & Agreement Rules
To learn more about our broader privacy practices, please see our Global Privacy Notice. If a Site has its own privacy notice, please refer to that notice instead.
- Broader privacy practices sit in other privacy notices Legal Rights & Agreement Rules
- What are Cookies and Trackers?
A "cookie” is a text file placed on a computer’s hard drive by a web server. A “web beacon” (also known as an Internet tag, pixel tag or clear GIF), is a technology that helps website and app providers identify when content has been accessed or visited. A Software Development Kit (“SDK”) is a set of tools and code provided by a service or platform that is integrated into a Site. In this Notice, we use the terms:
- "Cookies" covers pixels, SDKs, web beacons and other tracking tools Data Access & Collection
- “Cookies” to refer to cookies, pixel tags, SDKs, web beacons, and any other online tracking technologies we use on Sites.
- "Cookies" covers pixels, SDKs, web beacons and other tracking tools Data Access & Collection
- “Email Trackers” to refer to tracking technologies we embed in emails and which generally take the form of a small image file (tracking pixel, web beacon or clear GIF) or a tagged link that loads or redirects when you open an email or click on its content.
- "Email Trackers" are small images or tagged links in emails Data Access & Collection
“Session” refers to the period during which a user interacts with a Site (which can end when the user closes their browser or after a specified period of inactivity).
- A "Session" can end when you close the browser or go idle Data Access & Collection
- Essential Cookies typically collect session, security and consent-state data Data Access & Collection
“Personal Information” means any information relating to an identified or identifiable individual. Information collected by Cookies does not always meet the definition of Personal Information, depending on applicable privacy laws.
- Cookie data does not always count as "Personal Information" Legal Rights & Agreement Rules
- Mastercard processes cookie data only where it has a legal basis Legal Rights & Agreement Rules
- The Types of Cookies We Use
We use Cookies, including Cookies provided by third parties, to improve our Sites, measure the performance of our Sites, understand our audience, enhance the user experience, and to show ads based on browsing habits and activity on the Sites and other Sites.
First-party Cookies are Cookies placed by the Site you are using (for example, by us). Third-party Cookies are Cookies provided by other companies, such as our analytics or advertising partners, and may be placed or accessed through our Sites either on our behalf or for purposes determined by those parties.
- Third parties can place Cookies on Mastercard Sites for their own purposes Sharing & Disclosure
The Cookies used on a particular Site are listed in that Site’s Consent Tool.
- The Consent Tool gives the Site-specific cookie details Data Access & Collection
For ease of understanding, we group Cookies into the following categories:
- Essential Cookies. These Cookies are necessary for the Site to work properly and cannot be disabled. These Cookies enable core functionality such as security, network management, and accessibility.
- Essential Cookies cannot be turned off Use & Processing
- Functional Cookies. These Cookies enable our Sites to remember choices you make, for example, the language you select, or to enable services, such as viewing videos. These Cookies allow us to tailor the Sites to you and provide enhanced functionality. Without these Cookies, certain functionalities may not be available.
- Functional Cookies remember your choices and enable some services Use & Processing
- Performance Cookies. These Cookies help improve our Site by collecting and reporting information on how you use it. This information enables us to improve site performance, correct any errors, and provide a quality user experience. For instance, it helps us understand how long you spend on the Site and from where you are accessing it. It also helps us see if you have visited our Sites before so we can identify the number of unique users we receive.
- Performance Cookies track how you use a Site Data Access & Collection
- Advertising Cookies. These Cookies are used to analyze your interests and preferences to show you relevant ads on this Site and other Sites and provide a personalized marketing experience. They may be placed through our Site by third-party data, social media, or advertising companies that we partner with. They can also help us measure and improve advertising campaigns, including by understanding how users interact with ads and marketing content and by creating or using audience segments for advertising or measurement purposes.
- Advertising Cookies analyze your interests to show personalized ads Inference & Profiling
- Advertising Cookies may record your actions, ad clicks and audience segments Data Access & Collection
We generally ask for your consent to place non-Essential Cookies on our Sites. Click ‘Cookies Details’ under the Cookie names shown for each category in the Cookie Tool to learn more.
- Mastercard generally asks consent before non-Essential Cookies Use & Processing
Email Trackers
We use Email Trackers in some of the emails we send, such as newsletters, service updates, and other communications where permitted by applicable law. Email Trackers help us understand whether our messages are delivered successfully, whether they are opened or interacted with, and whether there are issues — such as deliverability problems or unusual activity — that require attention.
- Mastercard puts trackers in some of its emails Data Access & Collection
We use information collected by Email Trackers to:
- Email Tracker data is used for delivery checks, security and content Use & Processing
- confirm emails are delivered correctly, to maintain security (for example, helping verify that an account-related email is opened on a recognised device).
- Email Tracker data is used for delivery checks, security and content Use & Processing
- understand whether our communications are effective, improving our content.
- Email Tracker data is used for delivery checks, security and content Use & Processing
- manage or protect our email services.
- Email Tracker data is used for delivery checks, security and content Use & Processing
- How We May Use and Share Personal Information We Collect using Cookies and Trackers
Essential Cookies
Essential or ‘strictly necessary’ Cookies typically collect technical and session information required for the Site to work properly, such as:
- Essential Cookies typically collect session, security and consent-state data Data Access & Collection
- unique session identifiers,
- Essential Cookies typically collect session, security and consent-state data Data Access & Collection
- authentication tokens,
- Essential Cookies typically collect session, security and consent-state data Data Access & Collection
- security event data (e.g., anomaly, fraud, or bot detection signals),
- Essential Cookies typically collect session, security and consent-state data Data Access & Collection
- load-balancing or routing identifiers,
- Essential Cookies typically collect session, security and consent-state data Data Access & Collection
- basic device/browser metadata necessary to deliver the Site,
- Essential Cookies typically collect session, security and consent-state data Data Access & Collection
- preferences needed to maintain your session (e.g., cookie consent state).
- Essential Cookies typically collect session, security and consent-state data Data Access & Collection
Functional Cookies
Functional Cookies may collect information about:
- Functional Cookies may record preferences, past interactions and a browser identifier Data Access & Collection
- your saved preferences (such as language, region, accessibility settings, or display configuration);
- Functional Cookies may record preferences, past interactions and a browser identifier Data Access & Collection
- previous interactions with the Site (e.g., whether you completed an onboarding step or dismissed an informational banner);
- Functional Cookies may record preferences, past interactions and a browser identifier Data Access & Collection
- a device- or browser-level identifier that allows us to recognise your browser when you return;
- Functional Cookies may record preferences, past interactions and a browser identifier Data Access & Collection
- limited profile-linked identifiers where required to provide a personalised experience on Sites that require login (e.g., tying a preference to a user account).
- Functional Cookies can tie a preference to your account on login Sites Linking & Identification
Performance Cookies
Performance Cookies and collect information that helps us understand how visitors use and interact with our Sites. This may include:
- Performance Cookies may collect browsing, device and referral data Data Access & Collection
- unique identifiers and session details,
- Performance Cookies may collect browsing, device and referral data Data Access & Collection
- pages viewed and navigation paths,
- Performance Cookies may collect browsing, device and referral data Data Access & Collection
- clicks and other on-site interactions,
- Performance Cookies may collect browsing, device and referral data Data Access & Collection
- time spent on pages and visit frequency,
- Performance Cookies may collect browsing, device and referral data Data Access & Collection
- device and browser characteristics,
- Performance Cookies may collect browsing, device and referral data Data Access & Collection
- screen resolution,
- Performance Cookies may collect browsing, device and referral data Data Access & Collection
- referring URLs,
- Performance Cookies may collect browsing, device and referral data Data Access & Collection
- approximate location inferred from IP address, and
- Performance Cookies may infer approximate location from your IP address Inference & Profiling
- other technical signals needed to measure performance, diagnose issues, and analyse how features and content are used across our Sites.
- Performance Cookies may collect browsing, device and referral data Data Access & Collection
Advertising Cookies
Advertising Cookies can perform the same functions as Analytics Cookies, and they are also used by us and third parties to help show you relevant ads on our Sites and other Sites. They may collect and use additional information related to how you interact with ads and marketing content. This can include:
- Advertising Cookies may record your actions, ad clicks and audience segments Data Access & Collection
- actions you take that indicate your interests and activities, such as form submissions, downloads or sign-ups,
- Advertising Cookies may record your actions, ad clicks and audience segments Data Access & Collection
- campaign-specific identifiers added to URLs or Cookies to attribute your activity to a particular advertisement,
- Advertising Cookies may record your actions, ad clicks and audience segments Data Access & Collection
- ad click information, including click IDs generated by third-party platforms,
- Advertising Cookies may record your actions, ad clicks and audience segments Data Access & Collection
- engagement with marketing content, such as which ads you viewed or interacted with, and
- Advertising Cookies may record your actions, ad clicks and audience segments Data Access & Collection
- membership in audience segments created for advertising or measurement purposes.
- Advertising Cookies may record your actions, ad clicks and audience segments Data Access & Collection
Cookies of third-party advertising partners on our Sites may permit these partners to combine information collected about you or your device while visiting our Sites with information they obtain from other Sources.
- Ad partners' Cookies may combine your data with data from other sources Linking & Identification
GoogleGoogle and our other advertising partners may independently determine how they use information collected about you or your device by their Cookies on our Sites. See their privacy notices for more information.
- Google and other ad partners decide for themselves how they use the data Sharing & Disclosure
- Google may collect or receive information from our Sites and use it as an independent controller for personalisation of ads, measurement, reporting and to improve its products. You can learn how Google processes information it collects through our Sites, including the purposes for which it uses such information, in Google’s Privacy Policy and documentation for users in the EEA/UK.
- Google may use data from Mastercard Sites as an independent controller Sharing & Disclosure
- We act as a joint controller with Meta Platforms Ireland Ltd. under the Meta Business Tools TermsMeta
for the collection of Event Data (as defined in the Meta Business Tools Terms) through the Meta Pixel and its transmission to Meta. Information required under the EU’s General Data Protection Regulation (“GDPR”) relating to Meta Ireland’s processing and your rights is available in the Meta Privacy Policy.
- Mastercard is a joint controller with Meta for Meta Pixel event data Sharing & Disclosure
- Our Legal Bases for Processing Personal Information using Cookies and Trackers and Email Trackers
We only process Personal Information collected using Cookies and Email Trackers where this is permitted under applicable laws in the country where you are located, and only where we have a legal basis for doing so. Because global privacy laws differ, the legal basis we rely on may vary by jurisdiction and by the type of Cookie or Email Tracker used.
- Mastercard processes cookie data only where it has a legal basis Legal Rights & Agreement Rules
- Mastercard relies on consent where the country requires it Legal Rights & Agreement Rules
In some countries, consent is required before placing or accessing certain non-essential Cookies or before using certain Email Trackers for functionality, performance, or advertising. In those countries, Mastercard relies on your consent. In other countries, we may rely on additional or alternative legal bases as described below.
- Mastercard relies on consent where the country requires it Legal Rights & Agreement Rules
Processing Activity Legal Basis for Processing (where required under applicable law)
- Mastercard relies on consent where the country requires it Legal Rights & Agreement Rules
Using Performance, Functional, and Advertising Cookies to understand how users interact with our Sites, to personalize content, or to measure and improve campaigns. This includes any use of Email Trackers for functionality, performance, or advertising-related purposes where consent is required.
- Analytics and ad Cookies rest on consent, or legitimate interests where allowed Legal Rights & Agreement Rules
- Your consent to the placement of the Cookie and the related use of your Personal Information, where required by law (including EU ePrivacy rules).
- Analytics and ad Cookies rest on consent, or legitimate interests where allowed Legal Rights & Agreement Rules
- In countries permitting this without consent, we may rely on our legitimate interests in understanding and improving how users engage with our Sites, products, or communications, provided these interests are not overriden by your privacy rights under applicable law.
- Analytics and ad Cookies rest on consent, or legitimate interests where allowed Legal Rights & Agreement Rules
Activities to help the Site to function properly and securely, including supporting registration, authentication, fraud prevention, and login functionalities.
- Login and security Cookies rest on contract, legitimate interests or legal duty Security & Safeguards
- Necessary for performance of a contract (where we use Cookies to support registration or login processes initiated by you).
- Login and security Cookies rest on contract, legitimate interests or legal duty Security & Safeguards
- Legitimate interests in measures intended to provide a reliable, secure Site experience and preventing fraud or misuse.
- Login and security Cookies rest on contract, legitimate interests or legal duty Security & Safeguards
- Compliance with a legal obligation, where certain security related or auditing activities are mandated by applicable law.
- Login and security Cookies rest on contract, legitimate interests or legal duty Security & Safeguards
Using Cookies that support system integrity, detect technical issues, or measure deliverability or system performance (including certain Email Trackers used for security, authentication, or deliverability diagnostics).
- Integrity and deliverability tracking rests on legitimate interests, with consent where required Security & Safeguards
- Legitimate interests in measures intended to promote the security and stability of our Sites, systems, and communications.
- Compliance with legal or regulatory obligation relating to security and fraud prevention.
- Consent, where required under applicable law for any technology that stores or accesses information on your device.
- How We Share your Personal Information
See our Global Privacy Notice (or if a Site has its own privacy notice, that notice) for details about how we share Personal Information.
- Details on how personal information is shared are in another notice Sharing & Disclosure
- Your Rights and Choices
You can change your Cookie preferences at any time by using the “Manage Cookies” button (link on some Sites) at the bottom of the Site page. This allows you to withdraw consent or reject all Cookies except those that are strictly necessary for the Site to work properly.
When visiting websites, you may also be able to manage or delete some Cookies through your browser settings. For more information, please consult your browser’s help menu or visit http://www.allaboutcookies.org/.
- Browser settings may let you manage or delete some Cookies Use & Processing
If you have an account with one of the third-party platforms whose Cookies operate on our Sites, you may be able to adjust how those platforms use data collected from your interactions in your account settings. See the following links for more information:
- Google’s Safety Centre
- Meta’s Privacy Centre
- LinkedInLinkedIn
’s Privacy Centre
Please note that if you reject or delete Cookies, some parts of our Sites may not function properly or may become inaccessible.
- Rejecting or deleting Cookies can break parts of the Sites Use & Processing
To learn more about your choices or to exercise your privacy rights, please consult our Global Privacy Notice (or if a Site has its own privacy notice, that notice).
- Your privacy rights and how to use them are in another notice Legal Rights & Agreement Rules
- Data Transfers
See Section 5 Data Transfers in our Global Privacy Notice (or if a Site has its own privacy notice, the corresponding section in that notice).
- Data transfers are covered in Section 5 of the Global Privacy Notice Legal Rights & Agreement Rules
- How We Protect Your Personal Information
See Section 6 How We Protect Your Personal Information in our Global Privacy Notice (or if a Site has its own privacy notice, the corresponding section in that notice).
- How information is protected is in Section 6 of the Global Privacy Notice Security & Safeguards