E-commerce

Amazon Webstore

Amazon Webstore was a legacy e-commerce hosting platform from Amazon that let merchants run branded online stores on Amazon and AWS infrastructure. The storefront set session and functional cookies for cart and checkout, with payment and analytics handled through connected services. As a US hosted platform, it carried data transfer obligations for EU merchants.

Overview

What does Amazon Webstore do?

What Amazon Webstore is

Amazon Webstore was a hosted e-commerce platform from Amazon that allowed merchants to build branded online stores backed by Amazon and AWS infrastructure. It provided catalogue, basket, checkout, and payment features as a managed service. Amazon retired the product, so it is now mainly relevant to legacy stores and to merchants who have migrated to other platforms.

Data and cookies collected

The storefront set strictly necessary session cookies to keep the basket and checkout working, along with functional cookies for preferences. It processed customer account, order, and payment data to complete purchases. Where merchants added analytics or marketing tags, additional non essential cookies and identifiers could be set on top of the core store cookies.

GDPR and ePrivacy implications

Strictly necessary store and basket cookies could be set without consent under the ePrivacy Directive, while analytics and marketing cookies required prior consent. Because hosting was on US based Amazon infrastructure, EU merchants also had to address international data transfers and be transparent about them in the privacy notice and records of processing.

Consent requirements

A consent banner was required wherever non essential analytics or marketing cookies were used. Consent had to be freely given, specific, and informed, with reject as easy as accept, and no optional tags loading before the visitor agreed. Operators of legacy or migrated stores should make sure their current setup still meets these standards.

Data transfers

Because Amazon Webstore ran on US based Amazon and AWS infrastructure, using it from the EU meant transferring personal data to the United States. That transfer needed a valid mechanism such as the EU US Data Privacy Framework where applicable or standard contractual clauses with a transfer impact assessment. Merchants who have migrated should confirm the transfer position of their new host.

Practical compliance steps

Inventory the cookies and tags your store sets, block optional ones until consent, and confirm a valid US transfer safeguard. Keep your cookie and privacy policy current, document the legal basis and retention for each purpose, and if you are migrating away from Amazon Webstore, repeat this assessment for the replacement platform.

Compliance

Amazon Webstore and the GDPR

Amazon Webstore is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Contract performance and legitimate interest for strictly necessary storefront cookies; consent (Art. 6(1)(a) GDPR) for analytics and marketing cookies
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive

Impact assessment (DPIA)

For a standard storefront based on session and cart cookies, a full DPIA was usually not required, but the US hosting and any analytics or marketing layers raised the risk profile. Merchants migrating away from Amazon Webstore should reassess transfers and profiling in their new platform and document the change.

Sample text for your banner

We use necessary cookies to run our store and your basket. With your consent we also use analytics and marketing cookies to improve the store and show relevant offers, which may involve transferring data to the United States. You can accept, reject, or manage these at any time.
Cookies and trackers

What Amazon Webstore sets and contacts

Tracking method
Storefront session and functional cookies for cart and checkout, combined with Amazon and AWS hosting infrastructure and optional analytics or payment integrations
Server location
United States (Amazon Web Services infrastructure)
Data transferred outside the EU
Amazon Webstore was hosted on Amazon and AWS infrastructure based in the United States, so customer and order data were processed there. EU operators relying on it needed a valid transfer mechanism such as the EU US Data Privacy Framework or standard contractual clauses.

Cookies set (5)

NameTypeDurationPurpose
session-idStrictly necessarySessionMaintains the storefront session, cart, and checkout state during a visit.
session-tokenStrictly necessarySessionSecures the authenticated session and basket on the Amazon hosted storefront.
store-prefsFunctional1 yearRemembers store preferences such as language and currency.
cookie_consentStrictly necessary1 yearStores the visitor cookie consent choices so the banner is not shown repeatedly.
_gaAnalytics2 yearsThird party analytics cookie set only after consent where a merchant added web analytics.

Third-party domains contacted (3)

  • amazon.com
  • amazonaws.com
  • webstore.amazon.com
Questions

Frequently asked questions about Amazon Webstore

Can't find your question? Write to us, we answer fast.

What cookies did Amazon Webstore set?

The storefront set strictly necessary session and basket cookies plus functional cookies for preferences. Any analytics or marketing cookies appeared only where the merchant added tags for measurement or advertising, and those required consent.

Was consent required for Amazon Webstore?

No consent was needed for strictly necessary store and basket cookies. Consent was required before analytics or marketing cookies were set, so a banner was mandatory once a merchant enabled such non essential tags.

What was the legal basis for Amazon Webstore processing?

Strictly necessary storefront cookies relied on contract performance and legitimate interest, since they were needed to run the store and basket. Analytics and marketing cookies relied on consent under Article 6(1)(a) of the GDPR.

Did Amazon Webstore transfer data to the US?

Yes. It ran on US based Amazon and AWS infrastructure, so EU use involved transferring personal data to the United States. A valid mechanism such as the EU US Data Privacy Framework where applicable or standard contractual clauses with a transfer impact assessment was needed.

Was a DPIA needed for Amazon Webstore?

For a standard storefront on necessary cookies a full DPIA was usually not required, but US hosting and added analytics or marketing raised the risk. A DPIA was advisable where profiling was significant or sensitive data was involved.

How do I keep an Amazon Webstore based store compliant?

Inventory cookies and tags, block optional ones until consent, confirm a valid US transfer safeguard, document the legal basis and retention per purpose, and if you have migrated, repeat the assessment for the new platform.

What are alternatives to Amazon Webstore?

Since the platform was retired, common replacements include Shopify, BigCommerce, WooCommerce, and self-hosted European shop systems. Compare hosting location and data transfer terms, as some keep data in the EU.

How do I update an Amazon Webstore cookie policy?

List the cookies and tags your store sets with purpose and duration, state any US transfer and the safeguard relied on, reflect new integrations or a migration, and refresh the consent banner so visitors can re consent to the current set.

Fleetee

Fleetee is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Fleetee provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Fleetee helps deliver the right message to the right audience at the right time.

Marketing

BedBooking

BedBooking is an online scheduling and booking platform that enables businesses to automate appointment management and reduce no-shows. It provides a customizable booking interface, calendar synchronization, and automated reminders via email and SMS. BedBooking supports multiple service types, staff scheduling, and payment collection. With timezone detection and availability management, BedBooking simplifies scheduling across any industry and business size.

Preferences

seQura

SeQura is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. SeQura supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, SeQura ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Itoris

Itoris is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Itoris supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Itoris ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Freemius

Freemius is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Freemius supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Freemius ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Mojo

Mojo offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Mojo integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.