diff --git a/services/arbiter-3.0/src/routes/stripe.js b/services/arbiter-3.0/src/routes/stripe.js
index 5897f93..189ae45 100644
--- a/services/arbiter-3.0/src/routes/stripe.js
+++ b/services/arbiter-3.0/src/routes/stripe.js
@@ -12,12 +12,18 @@ const db = require('../database');
 
 // CORS configuration for checkout endpoint
 const corsOptions = {
-  origin: ['https://firefrostgaming.com', 'https://www.firefrostgaming.com'],
+  origin: [
+    'https://firefrostgaming.com',
+    'https://www.firefrostgaming.com',
+    'https://firefrost-website.pages.dev' // Cloudflare Pages preview domain
+  ],
   methods: ['POST', 'OPTIONS'],
-  credentials: false,
   optionsSuccessStatus: 200
 };
 
+// 👇 THE MAGIC LINE - Handle CORS preflight OPTIONS request
+router.options('/create-checkout-session', cors(corsOptions));
+
 /**
  * CREATE CHECKOUT SESSION
  * POST /stripe/create-checkout-session