diff --git a/app/controllers/api/btcpay_controller.rb b/app/controllers/api/btcpay_controller.rb
index f721c1d..94759fb 100644
--- a/app/controllers/api/btcpay_controller.rb
+++ b/app/controllers/api/btcpay_controller.rb
@@ -29,6 +29,7 @@ class Api::BtcpayController < Api::BaseController
     end
 
     def set_cors_access_control_headers
+      return unless Rails.env.development?
       headers['Access-Control-Allow-Origin'] = "*"
       headers['Access-Control-Allow-Headers'] = "*"
       headers['Access-Control-Allow-Methods'] = "GET"