Hosted checkout

What this feature does

Hosted checkout creates a Stripe Checkout Session for a vendor's direct connected-account charge and applies Mallello's disclosed platform fee.

This guide describes the behavior implemented by Mallello, the people allowed to use it, and the operational checks that keep it dependable.

Detailed workflow

1. The customer signs in and selects a valid quantity and listing options.
2. The server reloads the listing, price, availability, vendor ownership, and Connect readiness.
3. It creates a Stripe Checkout Session in the connected account with order metadata and an application fee.
4. Stripe collects card details on its hosted page; Mallello never receives raw card numbers.
5. The return page and signed webhooks reconcile the order and subscription or payment state.

Rules and permissions

• Browser-submitted price, vendor, fee, and product data are never trusted.
• Idempotency and stable metadata connect provider events to one internal order.
• Hosted checkout is blocked for ended, unavailable, or payout-ineligible listings.
• Taxes, shipping, refunds, and dispute responsibility follow the configured direct-charge and vendor terms.

Failure handling and edge cases

• A customer closing Stripe Checkout creates no paid order.
• A success redirect can arrive before the webhook and must show a reconciling state.
• Test-mode and live-mode Stripe objects cannot be mixed.