diff --git a/main.go b/main.go
index 263b3d1..676ad26 100644
--- a/main.go
+++ b/main.go
@@ -243,6 +243,7 @@ func main() {
 			order = prevOrder
 		}
 		w.Header().Set("Content-Type", "text/html; charset=utf-8")
+		w.Header().Set("Permissions-Policy", "payment=(self \"https://js.stripe.com\" \"https://m.stripe.network\" \"https://js.playground.kustom.co\")")
 		w.WriteHeader(http.StatusOK)
 		w.Write([]byte(fmt.Sprintf(tpl, order.HTMLSnippet)))
 	})