Global Cookie and Tracker Notice

Data Access & Collection · Context

Notice covers Mastercard's own Sites and its emails

The Notice explains how Mastercard uses Cookies on websites, applications and other online environments globally ("Sites") and Email Trackers in emails it sends. It applies only to Mastercard-provided Sites, meaning Sites Mastercard owns or operates and offers directly to users. Sites run by Mastercard's clients or partners are outside the Notice unless that Site's Consent Tool says the Notice applies.

Supporting quotations

This Global Cookie and Tracker Notice explains how Mastercard uses Cookies on websites, applications, and other online environments globally (“Sites”) and Email Trackers in emails we send.

This Notice applies only to “Mastercard-provided Sites,” meaning Sites that Mastercard owns or operates and makes available directly to users. Sites provided by our clients or partners are outside the scope of this Notice unless the Consent Tool for that Site indicates that this Notice applies.

Qualifications & exceptions

• Applies only to Mastercard-provided Sites: Sites Mastercard owns or operates and makes available directly to users.
• Client or partner Sites are outside the Notice unless the Consent Tool on that Site indicates that this Notice applies.

Not stated here

• Which client or partner Sites say this Notice applies is shown in each Site's Consent Tool, which is not supplied.

Cross-references

• has exception (model-proposed): On some partner Sites the partner stays the data controller — The scope rule excludes client and partner Sites; this block describes Sites provided by a client or partner whose Consent Tool says Mastercard manages Cookies and Trackers, where the client or partner stays controller for other processing.

Data Access & Collection · Procedure

The Consent Tool gives the Site-specific cookie details

The Notice is meant to be read together with each Site's cookie banner (the Consent Tool). Together they explain the types of Cookies used, why, and the choices available. The Consent Tool is described as the source of the most current, Site-specific details, including the Cookies used on that Site; this Notice itself does not list individual Cookies.

Supporting quotations

It should be read alongside information provided through our consent management tool or “cookie banner” (“Consent Tool”) on Sites. This Notice, together with our Consent Tool, explains the types of Cookies we use, why we use them, and the choices available to you. The Consent Tool provides the most current, Site-specific details, including the Cookies used on the corresponding Site.

The Cookies used on a particular Site are listed in that Site’s Consent Tool.

Qualifications & exceptions

• Site-specific details, including which Cookies a given Site uses, are given in that Site's Consent Tool.
• The Notice describes categories of Cookies, not the Cookies on a particular Site.

Not stated here

• The individual Cookie names and the per-Site lists are not in the supplied Notice text.

Data Access & Collection · Context

"Cookies" covers pixels, SDKs, web beacons and other tracking tools

In this Notice "Cookies" is a broad term: it means cookies, pixel tags, SDKs, web beacons and any other online tracking technologies Mastercard uses on Sites. The Notice also explains that an SDK is a set of tools and code from a service or platform that is built into a Site. So the Notice's rules and choices for "Cookies" reach beyond ordinary browser cookie files.

Supporting quotations

A Software Development Kit (“SDK”) is a set of tools and code provided by a service or platform that is integrated into a Site.

“Cookies” to refer to cookies, pixel tags, SDKs, web beacons, and any other online tracking technologies we use on Sites.

Qualifications & exceptions

• Applies to tracking technologies Mastercard uses on Sites (not Email Trackers, which have their own definition).

Data Access & Collection · Context

"Email Trackers" are small images or tagged links in emails

"Email Trackers" means tracking technologies Mastercard embeds in emails. They generally take the form of a small image file (tracking pixel, web beacon or clear GIF) or a tagged link that loads or redirects when you open the email or click its content.

Supporting quotations

“Email Trackers” to refer to tracking technologies we embed in emails and which generally take the form of a small image file (tracking pixel, web beacon or clear GIF) or a tagged link that loads or redirects when you open an email or click on its content.

Qualifications & exceptions

• Described as what Email Trackers "generally" look like, so other forms are not ruled out.
• They load or redirect when you open an email or click on its content.

Cross-references

• defines (model-proposed): Mastercard puts trackers in some of its emails — The Email Trackers definition explains the technology used in the emails described in the Email Trackers section.

Data Access & Collection · Context

A "Session" can end when you close the browser or go idle

The Notice defines "Session" as the period during which a user interacts with a Site. A Session can end when the user closes the browser or after a specified period of inactivity.

Supporting quotations

“Session” refers to the period during which a user interacts with a Site (which can end when the user closes their browser or after a specified period of inactivity).

Qualifications & exceptions

• "Can end": closing the browser or a specified period of inactivity are given as examples of how a Session ends.

Not stated here

• The length of the inactivity period is not stated.

Data Access & Collection · Company practice

Performance Cookies track how you use a Site

Performance Cookies collect and report information on how you use a Site, which Mastercard says it uses to improve performance, correct errors and provide a quality user experience. For example, they show how long you spend on the Site and from where you are accessing it, and whether you have visited Mastercard's Sites before so Mastercard can count the number of unique users.

Supporting quotations

Performance Cookies. These Cookies help improve our Site by collecting and reporting information on how you use it. This information enables us to improve site performance, correct any errors, and provide a quality user experience. For instance, it helps us understand how long you spend on the Site and from where you are accessing it. It also helps us see if you have visited our Sites before so we can identify the number of unique users we receive.

Qualifications & exceptions

• Examples of what they reveal are introduced by "for instance" and "also", so the list is not stated to be complete.

Data Access & Collection · Company practice

Mastercard puts trackers in some of its emails

Mastercard says it uses Email Trackers in some of the emails it sends, such as newsletters and service updates, where permitted by applicable law. They help it learn whether messages are delivered, whether they are opened or interacted with, and whether there are issues such as deliverability problems or unusual activity that need attention.

Supporting quotations

We use Email Trackers in some of the emails we send, such as newsletters, service updates, and other communications where permitted by applicable law. Email Trackers help us understand whether our messages are delivered successfully, whether they are opened or interacted with, and whether there are issues — such as deliverability problems or unusual activity — that require attention.

Qualifications & exceptions

• Only "some" emails carry Email Trackers.
• Used where permitted by applicable law; newsletters and service updates are given as examples ("such as").

Not stated here

• Which emails include Email Trackers is not stated.

Cross-references

• defined by (model-proposed): "Email Trackers" are small images or tagged links in emails — The Email Trackers definition explains the technology used in the emails described in the Email Trackers section.

Data Access & Collection · Company practice

Essential Cookies typically collect session, security and consent-state data

Mastercard says Essential Cookies typically collect the technical and session information a Site needs to work, such as unique session identifiers, authentication tokens, security event data (for example anomaly, fraud or bot-detection signals), load-balancing or routing identifiers, basic device or browser metadata, and preferences needed to keep your session going (for example your cookie consent state). A "Session" is the period during which you interact with a Site.

Supporting quotations

Essential or ‘strictly necessary’ Cookies typically collect technical and session information required for the Site to work properly, such as:

unique session identifiers

authentication tokens

security event data (e.g., anomaly, fraud, or bot detection signals)

load-balancing or routing identifiers

basic device/browser metadata necessary to deliver the Site

preferences needed to maintain your session (e.g., cookie consent state)

“Session” refers to the period during which a user interacts with a Site

Qualifications & exceptions

• Described as what these Cookies "typically" collect; the list is introduced by "such as" and is not stated to be complete.
• Device or browser metadata is limited to what is "necessary to deliver the Site".

Data Access & Collection · Company practice

Functional Cookies may record preferences, past interactions and a browser identifier

Mastercard says Functional Cookies may collect information about your saved preferences (such as language, region, accessibility settings or display configuration), your previous interactions with the Site (for example whether you completed an onboarding step or dismissed an informational banner), and a device- or browser-level identifier that lets it recognise your browser when you return.

Supporting quotations

Functional Cookies may collect information about:

your saved preferences (such as language, region, accessibility settings, or display configuration)

previous interactions with the Site (e.g., whether you completed an onboarding step or dismissed an informational banner)

a device- or browser-level identifier that allows us to recognise your browser when you return

Qualifications & exceptions

• Introduced as what these Cookies "may" collect; the examples in brackets are illustrative.

Data Access & Collection · Company practice

Performance Cookies may collect browsing, device and referral data

Mastercard says Performance Cookies collect information that helps it understand how visitors use and interact with its Sites. This may include unique identifiers and session details, pages viewed and navigation paths, clicks and other on-site interactions, time spent on pages and visit frequency, device and browser characteristics, screen resolution, referring URLs, and other technical signals needed to measure performance, diagnose issues and analyse how features and content are used.

Supporting quotations

collect information that helps us understand how visitors use and interact with our Sites. This may include:

unique identifiers and session details

pages viewed and navigation paths

clicks and other on-site interactions

time spent on pages and visit frequency

device and browser characteristics

screen resolution

referring URLs

other technical signals needed to measure performance, diagnose issues, and analyse how features and content are used across our Sites.

Qualifications & exceptions

• Introduced by "may include"; the list is not stated to be complete.

Data Access & Collection · Company practice

Advertising Cookies may record your actions, ad clicks and audience segments

Mastercard says Advertising Cookies can perform the same functions as "Analytics Cookies" and are also used by Mastercard and third parties to help show relevant ads on its Sites and other Sites. They may collect additional information about how you interact with ads and marketing content, which can include actions that indicate your interests (such as form submissions, downloads or sign-ups), campaign-specific identifiers added to URLs or Cookies, ad click information including click IDs generated by third-party platforms, which ads you viewed or interacted with, and membership in audience segments created for advertising or measurement.

Supporting quotations

Advertising Cookies can perform the same functions as Analytics Cookies, and they are also used by us and third parties to help show you relevant ads on our Sites and other Sites. They may collect and use additional information related to how you interact with ads and marketing content. This can include:

actions you take that indicate your interests and activities, such as form submissions, downloads or sign-ups

campaign-specific identifiers added to URLs or Cookies to attribute your activity to a particular advertisement

ad click information, including click IDs generated by third-party platforms

engagement with marketing content, such as which ads you viewed or interacted with

membership in audience segments created for advertising or measurement purposes.

They can also help us measure and improve advertising campaigns, including by understanding how users interact with ads and marketing content and by creating or using audience segments for advertising or measurement purposes.

Qualifications & exceptions

• Used by Mastercard and by third parties.
• Introduced by "can include"; the list is not stated to be complete.

Not stated here

• "Analytics Cookies" is not one of the four categories the Notice lists (Essential, Functional, Performance, Advertising), so exactly which Cookies it refers to is not stated.
• Whether "other Sites" means only Mastercard Sites or also sites run by others is not stated.