Does Amazon.com tracking require cookie consent on third-party sites?

Conditionally. Amazon affiliate tracking and advertising pixels require marketing consent under GDPR and ePrivacy. Amazon Pay payment scripts are essential and exempt. AWS-hosted static assets are infrastructure and do not require consent.

What cookies does Amazon.com set on third-party sites?

On third-party sites, Amazon advertising pixels set ad-id (1-year, on amazon-adsystem.com) for retargeting. Affiliate referrals cause Amazon to set session-id, ubid-main, and i18n-prefs (each up to 1–2 years) on amazon.com for attribution tracking within a 24-hour window.

How does ConsentStack handle Amazon.com scripts?

ConsentStack splits Amazon.com by function: advertising pixels and affiliate tracking scripts are classified as marketing and blocked until consent is granted. Amazon Pay widgets are essential and always allowed. ConsentStack uses domain and script-path matching to distinguish advertising from infrastructure requests.

What tracker domains does Amazon.com use?

ConsentStack has catalogued tracker domains for Amazon.com including amazon-adsystem.com, d3k81ch9hvuctc.cloudfront.net and d1e21p1elafqwq.cloudfront.net, among 1000 in total. These are the network destinations Amazon.com's scripts contact, which a consent platform blocks until a visitor agrees.

Amazon.com - Affiliate Tracking & Privacy Profiles

Back to Vendor Library

Overview

Amazon.com operates one of the largest affiliate and advertising networks on the web. Third-party website integrations arise through Amazon Associates (affiliate program), Amazon Advertising pixels, and AWS-hosted resources. The Associates program connects publishers and content sites to Amazon's product catalog for commission-based revenue.

What This Script Does

Amazon Associates / Affiliate Tracking When a site links to Amazon products using affiliate links, Amazon loads tracking scripts on the referring page and on Amazon's destination pages. On the referring site, an affiliate pixel may fire to register the click and begin the attribution window. Amazon sets cookies on amazon.com to:

Record which affiliate tag generated the click (tag= parameter)
Maintain a 24-hour attribution window for standard Associate links (90 days for Amazon Bounty program)
Track the products viewed and purchased during the attribution window

Cookies set during affiliate referrals (on amazon.com itself):

session-id / session-id-time (1 year) — session attribution for affiliate clicks
ubid-main (1 year) — unique browser identifier
i18n-prefs (1 year) — locale preferences
lc-main (1 year) — language preferences

Amazon Advertising Pixel (on third-party sites) Some publishers and retailers embed the Amazon Advertising pixel directly via aax.amazon-adsystem.com. On third-party pages, this pixel:

Fires page view and product interaction events
Sets ad-id (1 year, third-party) — Amazon advertising identifier on amazon-adsystem.com
Collects page URL, product identifiers (ASINs), referral parameters, and browser metadata
Builds retargeting audiences for Amazon DSP campaigns

Amazon Pay (Payment Widget) Sites implementing Amazon Pay load scripts from static-na.payments-amazon.com or static-eu.payments-amazon.com. This script:

Checks whether the visitor has an Amazon account for the one-click payment experience
Opens a secure authentication overlay for Amazon account login
Contacts payments.amazon.com to create and complete payment sessions
Sets session-scoped cookies for the duration of the payment flow

Domains contacted: aax.amazon-adsystem.com, s.amazon-adsystem.com, static-na.payments-amazon.com, static-eu.payments-amazon.com, payments.amazon.com, images-na.ssl-images-amazon.com (product images CDN)

Consent & Compliance

GDPR/ePrivacy: Amazon affiliate tracking cookies and advertising pixels perform conversion attribution and behavioral profiling. Third-party cookies set by amazon-adsystem.com require explicit opt-in consent under the ePrivacy Directive. Amazon Pay's payment processing cookies are functional and covered by contractual necessity under GDPR Article 6(1)(b). IAB TCF Purposes 1, 2, 3, and 4 apply to advertising pixels.

CCPA/CPRA: Sharing purchase and browsing data with Amazon for advertising and affiliate attribution qualifies as sharing personal information. Sites must disclose Amazon affiliate tracking in their privacy policy and honor opt-out requests.

EU-US Data Transfers: Amazon.com Inc. participates in the EU-US Data Privacy Framework (DPF).

Consent category: Marketing (advertising pixels, affiliate tracking) and Essential (Amazon Pay payment processing).

Should You Block This Without Consent?

Yes. Amazon affiliate tracking scripts and advertising pixels set tracking cookies and share behavioral data with Amazon's advertising platform. Block them until marketing consent is granted. AWS-hosted static assets, product images via CloudFront CDN, and Amazon Pay payment processing are infrastructure and essential functions that do not require consent.

Is Amazon.com GDPR compliant?

Amazon.com typically loads marketing and analytics trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Amazon.com can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Amazon.com, not on Amazon.com itself.

Visit website

Consent Categories

Marketing Analytics

Also Known As

Amazon Associatesaffiliate trackingAmazon pixelAmazon attribution

Industries

E-commerce and Shopping

Tracked Domains (1000)

Amazon.com's trackers are common, seen on about 13% of the sites ConsentStack has scanned. Scan your own site to see which of these are firing before consent.

amazon-adsystem.comMarketing

amazon-adsystem.com is a marketing domain operated by Amazon.com, used to serve ads, build audiences, and measure ad conversions. Seen on about 13% of scanned sites.

d3k81ch9hvuctc.cloudfront.netEssential

d3k81ch9hvuctc.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on about 1% of scanned sites.

d1e21p1elafqwq.cloudfront.netEssential

d1e21p1elafqwq.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

growmefrontendassetsstack-growheadlessbucket79e0b0-aqcqbhbrt0qb.s3.amazonaws.comEssential

growmefrontendassetsstack-growheadlessbucket79e0b0-aqcqbhbrt0qb.s3.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d3e54v103j8qbb.cloudfront.netEssential

d3e54v103j8qbb.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

media-amazon.comEssential

media-amazon.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d2mjzob2nc713b.cloudfront.netEssential

d2mjzob2nc713b.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

storejs.s3.us-west-2.amazonaws.comEssential

storejs.s3.us-west-2.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

ams-pageview-public.s3.amazonaws.comEssential

ams-pageview-public.s3.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

sqs.us-east-1.amazonaws.comEssential

sqs.us-east-1.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d15kdpgjg3unno.cloudfront.netEssential

d15kdpgjg3unno.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

addshoppers.s3.amazonaws.comEssential

addshoppers.s3.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

eu-west-1.amazonaws.comEssential

eu-west-1.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

dyv1bugovvq1g.cloudfront.netEssential

dyv1bugovvq1g.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d2hrivdxn8ekm8.cloudfront.netEssential

d2hrivdxn8ekm8.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d1eoo1tco6rr5e.cloudfront.netEssential

d1eoo1tco6rr5e.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

execute-api.us-east-1.amazonaws.comEssential

execute-api.us-east-1.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

s3.us-east-1.amazonaws.comEssential

s3.us-east-1.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d34r8q7sht0t9k.cloudfront.netEssential

d34r8q7sht0t9k.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

dr4qe3ddw9y32.cloudfront.netEssential

dr4qe3ddw9y32.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

serving-sys.comMarketing

serving-sys.com is a marketing domain operated by Amazon.com, used to serve ads, build audiences, and measure ad conversions. Seen on under 1% of scanned sites.

xp2023-pix.s3.amazonaws.comEssential

xp2023-pix.s3.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d1ce7ar9ygqaw4.cloudfront.netEssential

d1ce7ar9ygqaw4.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d3j8vl19c1131u.cloudfront.netEssential

d3j8vl19c1131u.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

dn0qt3r0xannq.cloudfront.netEssential

dn0qt3r0xannq.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d1639lhkj5l89m.cloudfront.netEssential

d1639lhkj5l89m.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d38xvr37kwwhcm.cloudfront.netEssential

d38xvr37kwwhcm.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

us-west-2.amazonaws.comEssential

us-west-2.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

dxbhsrqyrr690.cloudfront.netEssential

dxbhsrqyrr690.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d23dclunsivw3h.cloudfront.netEssential

d23dclunsivw3h.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d10lpsik1i8c69.cloudfront.netEssential

d10lpsik1i8c69.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

amazon.comMarketing

amazon.com is a marketing domain operated by Amazon.com, used to serve ads, build audiences, and measure ad conversions. Seen on under 1% of scanned sites.

d18eg7dreypte5.cloudfront.netEssential

d18eg7dreypte5.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d3hb14vkzrxvla.cloudfront.netEssential

d3hb14vkzrxvla.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

capi-automation.s3.us-east-2.amazonaws.comEssential

capi-automation.s3.us-east-2.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d1hyarjnwqrenh.cloudfront.netEssential

d1hyarjnwqrenh.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d1z2jf7jlzjs58.cloudfront.netEssential

d1z2jf7jlzjs58.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

us-east-2.amazonaws.comEssential

us-east-2.amazonaws.com is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d3plfjw9uod7ab.cloudfront.netEssential

d3plfjw9uod7ab.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

d1mkq4fbm7j30i.cloudfront.netEssential

d1mkq4fbm7j30i.cloudfront.net is an essential domain operated by Amazon.com, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.

+ 960 more tracked domains, shown by how common they are across scanned sites.