> Sizmek (Amazon Ad Server) compliance guide: ad serving cookies, US data transfers, GDPR and TCF consent rules and DPIA triggers for ad serving. > > Canonical: https://www.flowconsent.com/en/services/advertising/sizmek Advertising # Sizmek Marketing · [Official website](https://sizmek.com) Sizmek is an ad serving and rich media platform now operating as Amazon Ad Server after Amazon acquired the assets in 2019. It serves and measures display, video, and rich media advertising campaigns, with creative management, dynamic creative optimisation, and verification capabilities. Sizmek tags set advertising cookies on serving.bm23.com and amazon-adsystem.com, and process data on Amazon infrastructure in the United States. EU deployments require explicit consent under the GDPR and the ePrivacy Directive. [Block Sizmek until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=advertising) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Advertising](https://www.flowconsent.com/en/services/advertising) - Consent Marketing - Prior consent Required - Documented cookies 4 - Third-party domains 5 - Servers United States (Amazon Advertising infrastructure on AWS) with European edge nodes Overview ## What does Sizmek do? ## **What is Sizmek** Sizmek was an independent ad serving and rich media platform until 2019, when Amazon acquired the technology and rebranded the core product as Amazon Ad Server. Today it remains one of the largest third party ad servers used by agencies and advertisers to deliver display, video, rich media, and dynamic creative across the open web. On publisher sites, Sizmek is loaded as a third party ad tag inside the ad slot. The tag serves the creative, tracks impressions, viewability and clicks, and may run dynamic creative optimisation based on visitor signals. ## **What data does Sizmek process** Each ad served collects the IP, User Agent, page URL, referrer, viewport size, viewability metrics, click and conversion events, and any audience identifiers passed by the advertiser or the DSP. Sizmek may also collect content categorisation for brand safety purposes. Cookies are set on serving.bm23.com, amazon-adsystem.com, and other Amazon advertising domains: ad-id (advertising identifier), ad-privacy (consent state), session helpers, frequency capping cookies. All are third party and require consent. ## **GDPR, ePrivacy and TCF v2.2** Amazon Advertising is registered in the IAB Europe TCF v2.2 Global Vendor List for the relevant advertising purposes. The TC string must be transmitted in the bid request and the ad call. Without consent, Sizmek tags must not fire. After CJEU C 252/21, legitimate interest is not available for behavioural advertising. Consent is the only safe Art. 6 GDPR basis. The Belgian DPA TCF decision and CNIL enforcement against opaque ad chains apply. ## **Amazon integrations and audience implications** Once integrated under Amazon Advertising, Sizmek data can be combined with Amazon DSP audience profiles. This raises specific EDPB and DPA concerns about the combined power of a large retailer and an ad serving stack: granular shopping, content browsing, and ad exposure data are now under one controller. Document this in your DPIA, especially the data combination and the cross border transfer chain. ## **Data transfers and Schrems II** Amazon Corporate LLC is a US controller, certified under the EU US Data Privacy Framework. SCCs apply where DPF is not sufficient. A Transfer Impact Assessment is required by the publisher / advertiser. Document the chain from the publisher to Amazon Ad Server, and from Amazon Ad Server to any DSP or verification partner. ## **Practical compliance checklist** Sign the Amazon Advertising Services agreement and DPA. Register the Amazon Ad Server vendor in your TCF v2.2 CMP. Defer ad tags until consent. Restrict Sizmek to specific ad slots and content categories. Document the cross border transfer chain in your privacy notice. Implement Global Privacy Control handling. Review the DPIA annually, especially around the Amazon DSP audience combinations and any new Amazon products integrated with Sizmek. Compliance ## Sizmek and the GDPR Sizmek is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) is the only safe basis for advertising cookies, ad serving, and audience profiling - Risk level high - Applicable regulations GDPR, ePrivacy Directive, TTDSG (Germany), IAB Europe TCF v2.2, Digital Services Act, CCPA/CPRA ### Impact assessment (DPIA) Sizmek (Amazon Ad Server) is a high impact ad serving and measurement platform. Key DPIA considerations: (1) ad tags collect the visitor IP, User Agent, page URL, referrer, click and impression events, and any audience identifiers passed by the publisher; (2) cookies set on the serving domain enable cross site frequency capping and re targeting; (3) data is processed on Amazon Web Services infrastructure, with US storage triggering Schrems II requirements; (4) Amazon Advertising integrations link Sizmek data with Amazon DSP and audience profiles, which raises additional concerns under EDPB guidance on retail giant profiling; (5) verification features (viewability, brand safety) may involve content scanning that could capture sensitive context. ### Sample text for your banner > We use Sizmek (Amazon Ad Server) to serve and measure advertising on our website. With your consent, Sizmek sets advertising cookies on its serving domains and processes your interactions with ads. This data is transferred to Amazon servers in the United States under Standard Contractual Clauses. You can refuse advertising in our consent banner. Cookies and trackers ## What Sizmek sets and contacts - Tracking method JavaScript ad tag, third party ad serving - Server location United States (Amazon Advertising infrastructure on AWS) with European edge nodes - Data transferred outside the EU Sizmek is now part of Amazon Advertising, acquired by Amazon in 2019 and renamed Amazon Ad Server. Data is processed on Amazon Web Services infrastructure in the United States, with edge regions worldwide. EU data transfers rely on Standard Contractual Clauses and the EU US Data Privacy Framework certification of Amazon Corporate LLC. ### Cookies set (4) | Name | Type | Duration | Purpose | | ---------- | --------- | --------- | ----------------------------------------------------------------------------------------------------------------------------------------------------- | | ad-id | Marketing | 13 months | Persistent advertising identifier used by Amazon Ad Server (Sizmek) to recognise users for frequency capping and re targeting across publisher sites. | | ad-privacy | Marketing | 13 months | Stores the current Amazon advertising consent state for the visitor, including TCF v2.2 signals. | | eud | Marketing | 6 months | EU device identifier used to manage frequency capping and re targeting in the EU region. | | aps\_\* | Marketing | 13 months | Family of Amazon Publisher Services cookies used for header bidding orchestration and conversion measurement. | ### Third-party domains contacted (5) - `serving.bm23.com` - `amazon-adsystem.com` - `aax.amazon-adsystem.com` - `aax-eu.amazon-adsystem.com` - `sizmek.com` Questions ## Frequently asked questions about Sizmek Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does Sizmek set? Sizmek (Amazon Ad Server) writes third party cookies on serving.bm23.com, amazon-adsystem.com, and related Amazon advertising domains: ad-id (advertising identifier), ad-privacy (consent state), frequency capping helpers and conversion tracking cookies. All are advertising cookies and require consent. ### Is user consent required? Yes for any EU deployment. The Sizmek ad tag, cookies, and OpenRTB integration require prior informed consent under Art. 5(3) ePrivacy and §25 TTDSG, plus a valid TCF v2.2 TC string transmitted to Amazon Ad Server. ### What is the legal basis? Consent (Art. 6(1)(a) GDPR). Legitimate interest is not available for behavioural advertising after CJEU C 252/21. The Amazon Advertising vendor declaration in TCF v2.2 must match the actual processing. ### Does Sizmek transfer data outside the EU? Yes. After the Amazon acquisition, data is processed on AWS infrastructure in the United States under SCCs and the EU US Data Privacy Framework certification of Amazon. A Transfer Impact Assessment is required by the publisher and the advertiser. ### Do I need a DPIA for Sizmek? Yes, in most cases. The DPIA must cover audience and content categorisation, the Amazon DSP combinations, US transfers, vendor list, retention, and Art. 22 GDPR considerations. ### How do I implement Sizmek compliantly? Sign the Amazon Advertising Services agreement and DPA. Register Amazon Ad Server in your TCF v2.2 CMP. Defer the Sizmek ad tag until consent. Restrict Sizmek to specific slots. Document the US transfer chain and the Amazon DSP combinations. ### What are the alternatives to Sizmek? Independent ad servers: Google Campaign Manager 360 (DV360 ad serving), Adform Flow, Equativ (Smart AdServer), Flashtalking (a Mediaocean company). DSPs that include ad serving: The Trade Desk, MediaMath. After the Amazon acquisition, Sizmek and Amazon Ad Server are increasingly tied to the Amazon ecosystem. ### How should I update my cookie policy? List the Sizmek / Amazon Ad Server cookies (ad-id, ad-privacy) with provider (Amazon Corporate LLC, United States), purpose (third party ad serving and measurement), lifetime, and category (Marketing). Disclose the US transfer, the Amazon Advertising integration, and link the Amazon privacy notice. Same category ## More services: Advertising [See the whole category](https://www.flowconsent.com/en/services/advertising) ### [Tracify](https://www.flowconsent.com/en/services/advertising/tracify) [Tracify is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Tracify integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Tracify makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/advertising/tracify) [Marketing](https://www.flowconsent.com/en/services/advertising/tracify) · ### [StackAdapt](https://www.flowconsent.com/en/services/advertising/stackadapt) [StackAdapt is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. StackAdapt provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, StackAdapt helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/stackadapt) [Marketing](https://www.flowconsent.com/en/services/advertising/stackadapt) · ### [Jeeng](https://www.flowconsent.com/en/services/advertising/jeeng) [Jeeng is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Jeeng provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Jeeng helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/jeeng) [Marketing](https://www.flowconsent.com/en/services/advertising/jeeng) · ### [PartnerStack](https://www.flowconsent.com/en/services/advertising/partnerstack) [PartnerStack is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. PartnerStack integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, PartnerStack helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/advertising/partnerstack) [Marketing](https://www.flowconsent.com/en/services/advertising/partnerstack) · ### [Beeswax](https://www.flowconsent.com/en/services/advertising/beeswax) [Beeswax is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Beeswax enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Beeswax empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/beeswax) [Marketing](https://www.flowconsent.com/en/services/advertising/beeswax) · ### [GrowSurf](https://www.flowconsent.com/en/services/advertising/growsurf) [GrowSurf is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. GrowSurf provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, GrowSurf helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/growsurf) [Marketing](https://www.flowconsent.com/en/services/advertising/growsurf) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)