Gumroad vs Xsolla

Gumroad is a platform for selling digital products and services such as books, memberships, and courses. Creators can customize a storefront, connect a custom domain, or place payment and follow widgets on an existing site; adding those widgets requires the ability to edit its HTML. Payment options include one-time, recurring, fixed-length, and pay-what-you-want charges in different currencies. Memberships can provide a content library with billing periods including monthly, quarterly, biannually, and yearly. Digital product support includes PDF, ePub, and Mobi versions, plus generated software license keys and lightweight DRM. Creators can import email lists, export follower and customer details, send broadcasts, and create automated workflows. Sales analytics and tracking support Google Analytics, Meta Pixel, and TikTok Pixel. Gumroad also provides an API and buyer apps for Android and iOS. Payout methods vary by country; direct deposit or PayPal may be available. The maker says it handles worldwide sales-tax collection and remittance as merchant of record. Direct sales cost 10% + $0.50 per transaction; Discover sales to new customers cost 30% per transaction.

Xsolla provides tools and services for video game businesses to sell, monetize, distribute, and grow games. It serves developers, publishers, creators, resellers, payment providers, and advertisers. Its merchant of record offering covers 200+ countries and regions, 1,000+ payment methods, and 130+ currencies. Web Shop combines direct-to-player sales with payments, LiveOps, analytics, and first-party player data; merchants can offer in-game items, currency packs, bundles, and subscriptions with regional pricing and restrictions. Xsolla SDK 3 lists iOS, Android, Unity, Epic Games Store, and standalone PC builds as targets, and describes a four-call purchase flow from authentication through finalization. Its SDK price is 5% per transaction, with no monthly fees or minimum volume; general pricing inquiries go through a contact form. Xsolla describes fraud screening using cross-game analytics, machine learning, transaction checks, and manual review. It says it is SOC and PCI DSS certified, encrypts sensitive data with TLS and PFS, and provides DDoS protection. The company was founded in 2005 and is based in Los Angeles.