paddle.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since paddle.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public,max-age=0,must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

base-uri 'self'; default-src 'self' blob: data: https: ; worker-src 'self' blob:; frame-ancestors 'self' *.paddle.com *.prismic.io https://www.profitwell.com https://paddle.enablix.com https://paddle.letter.ai; media-src 'self' blob: data: https: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.contentsquare.net app.contentsquare.com d-code.liadm.com *.vector.co *.usbrowserspeed.com *.visualwebsiteoptimizer.com app.vwo.com tag.unifyintent.com unifyintent.com *.stackadapt.com *.twitter.com *.iubenda.com connect.facebook.net *.cloudfront.net *.hsforms.com googleads.g.doubleclick.net *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hsforms.net *.hsleadflows.net *.licdn.com *.ads-twitter.com *.doubleclick.net *.google-analytics.com *.google.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.redditstatic.com *.youtube.com dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net prod-assets.sequelvideo.com cdn.dreamdata.cloud cdn.drda.io https: ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.contentsquare.net app.contentsquare.com *.mdb.tools d-code.liadm.com *.vector.co *.usbrowserspeed.com *.visualwebsiteoptimizer.com app.vwo.com tag.unifyintent.com unifyintent.com *.youtube.com *.wistia.net *.wistia.com *.licdn.com *.ads-twitter.com *.doubleclick.net *.redditstatic.com *.profitwell.com *.bing.com js.hubspot.com *.hs-analytics.net *.hs-banner.com *.hsadspixel.net *.clarity.ms *.hs-scripts.com connect.facebook.net *.rudderlabs.com *.influ2.com *.stackadapt.com *.metadata.io *.clearbitscripts.com *.clearbitjs.com *.kustomerapp.com *.qualified.com *.iubenda.com *.netlify.app *.hsforms.net *.googletagmanager.com *.googleapis.com prismic.io *.prismic.io *.mplat-ppcprotect.com status.io dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net tracking.g2crowd.com cdn.jsdelivr.net/npm/hockeystack@latest/hockeystack.min.js cdn.jsdelivr.net/npm/hockeystack@latest/hockeystack-qualified.min.js cdn.jsdelivr.net/gh/trysurface/scripts@latest/surface_tag.min.js js.stripe.com/v3/ cdnjs.cloudflare.com/polyfill/ prod-assets.sequelvideo.com cdn.dreamdata.cloud cdn.drda.io https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com *.cloudfront.net *.youtube.com dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net s3.amazonaws.com https: blob: ; object-src 'none'; font-src 'self' *.cloudfront.net *.gstatic.com data: https: ; connect-src 'self' *.contentsquare.net *.contentsquare.com api.vector.co *.visualwebsiteoptimizer.com app.vwo.com dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net *.qualified.com cdn.dreamdata.cloud ws: wss: https: data: ; img-src 'self' *.contentsquare.net *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io *.googletagmanager.com *.ctfassets.net *.reddit.com *.cloudfront.net *.ytimg.com *.adsymptotic.com *.ads.linkedin.com t.co *.hubspot.com *.facebook.com *.google.com *.youtube.com *.ggpht.com dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net chart.googleapis.com wingify-assets.s3.amazonaws.com data: https:; frame-src 'self' csxd.paddle.com csxd.www.paddle.com i.liadm.com paddle.chilipiper.com *.visualwebsiteoptimizer.com app.vwo.com paddle.prismic.io www.googletagmanager.com *.youtube.com *.wistia.net *.wistia.com *.hsforms.com paddle.kustomer.help *.kustomerapp.com *.qualified.com app.netlify.com *.doubleclick.net *.prismic.io www.slideshare.net dnf20ypvrc856.cloudfront.net dta8euw1l8gvs.cloudfront.net js.stripe.com *.sequel.io *.withsurface.com www.google.com recaptcha.google.com www.recaptcha.net; upgrade-insecure-requests;

Strict-Transport-Security

max-age=31536000; includeSubDomains

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://paddle.com/HTTP 301

   → https://paddle.com/

2. 2.https://paddle.com/HTTP 301

   → https://www.paddle.com/

3. 3.https://www.paddle.com/HTTP 200

Meta tags

Title

Paddle - Subscriptions, Payments & Tax Compliance for SaaS & Mobile Apps

Description

Increase revenue, reduce risk and reduce cost with Paddle, the payment solution powering global revenue for n8n, Letterboxd & AdGuard. One platform that handles billing, tax and compliance.

Canonical

https://www.paddle.com

Robots

index

Generator

Not set

Open Graph title

Paddle - Subscriptions, Payments & Tax Compliance for SaaS & Mobile Apps

Open Graph description

Increase revenue, reduce risk and reduce cost with Paddle, the payment solution powering global revenue for n8n, Letterboxd & AdGuard. One platform that handles billing, tax and compliance.

Open Graph image

https://images.prismic.io/paddle/Z9gwpziBA97GijeQ_paddle-merchant-of-record-og.png?auto=format,compress&rect=0,20,1200,591&w=1280&h=630

Open Graph type

Not set

Twitter card

summary_large_image

Twitter title

Paddle - Subscriptions, Payments & Tax Compliance for SaaS & Mobile Apps

Twitter image

https://images.prismic.io/paddle/Z9gwpziBA97GijeQ_paddle-merchant-of-record-og.png?auto=format,compress&rect=0,15,1200,600&w=1024&h=512

robots.txt

Disallow rules (User-agent: *)

1

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  X-Powered-By: Next.js

• Google Tag Manageranalytics

  Found "googletagmanager.com/gtm.js" in the page's HTML

Related domains