FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

Stamped

PreferencesOfficial website

Stamped is a reviews, ratings, loyalty and user generated content platform widely used by e-commerce stores on Shopify and other platforms. It works by loading a third party JavaScript widget into the storefront that displays reviews and may collect data such as IP address, device and browser information, and behavioural signals. Stamped sets browser cookies and may use local storage to remember visitors and link review activity. Because these technologies are not strictly necessary, the ePrivacy Directive and GDPR require prior consent before they load. Stamped is operated from the United States, so personal data is transferred outside the EEA and the UK, relying on Standard Contractual Clauses. Store operators act as data controllers and should obtain consent and document the processing. Configuring the widget to load only after consent is the recommended compliant approach.

Block Stamped until consentScan my site
Overview

What does Stamped do?

Stamped is a reviews, ratings, loyalty and user generated content platform used by many online stores, particularly on Shopify. It helps merchants collect customer reviews, display social proof and run loyalty programmes through embedded widgets on the storefront.

What Stamped is

Stamped provides review collection, ratings display, photo and video reviews, and loyalty and rewards tools for e-commerce brands. It integrates with storefront platforms and loads its features through a JavaScript widget served from Stamped infrastructure.

What data and cookies it collects

When the widget loads it can collect IP address, browser and device information, and behavioural signals about how a visitor interacts with reviews. Stamped sets browser cookies and may use local storage to remember visitors, link review submissions and support loyalty accounts. Customers who submit reviews also provide their name, email and review content.

GDPR and ePrivacy implications

Because the cookies and storage used by Stamped are not strictly necessary, the ePrivacy Directive requires prior consent before they are placed. Under GDPR the store acts as data controller and must have a lawful basis, provide transparency and honour data subject rights. Consent is the most appropriate basis given the marketing and profiling context.

Consent and data transfers

Valid consent must be obtained before the widget loads, and the widget should be blocked until the visitor agrees. Stamped operates from the United States, so personal data leaves the EEA and the UK. These transfers rely on Standard Contractual Clauses and supplementary measures, which should be referenced in your privacy notice and processing records.

Practical compliance steps

Categorise Stamped as a marketing service in your consent manager and prevent it from loading until consent is given. Sign a data processing agreement with Stamped, document the transfer safeguards, list the cookies in your cookie policy and set sensible retention periods. Test that declining consent keeps the widget fully disabled.

Compliance

Stamped and the GDPR

Stamped is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive

Impact assessment (DPIA)

A full data protection impact assessment is not usually mandatory for a standard reviews widget, but a documented assessment is recommended because Stamped processes personal data and transfers it to the United States. Consider the volume of visitor data captured, the use of behavioural signals, and any combination with loyalty profiles. Where loyalty programmes profile customers or marketing is layered on top, the risk increases and a DPIA becomes advisable. Document the legal basis, retention periods and the transfer safeguards in your records of processing.

Sample text for your banner

We use Stamped to show customer reviews and run our loyalty programme. This sets cookies and may share data with Stamped in the United States. Please accept to enable reviews and loyalty features, or decline to keep them disabled.
Cookies and trackers

What Stamped sets and contacts

Tracking method
Third party JavaScript widget that loads review and loyalty content, sets browser cookies and may use local storage and device identifiers
Server location
United States (with content delivery via global CDN)
Data transferred outside the EU
Personal data is transferred to the United States. Transfers from the EEA and UK rely on Standard Contractual Clauses and supplementary safeguards as described in the Stamped privacy policy.

Cookies set (3)

NameTypeDurationPurpose
_stamped_sessionthird partySessionMaintains a visitor session for the reviews and loyalty widget while browsing.
_stamped_idthird partyUp to 1 yearRecognises returning visitors and links review and loyalty activity to a stable identifier.
stamped_local_storageJS first partyPersistent until clearedLocal storage used to cache widget state and preferences in the browser.

Third-party domains contacted (3)

  • stamped.io
  • cdn-stamped-io.azureedge.net
  • api.stamped.io
Questions

Frequently asked questions about Stamped

Can't find your question? Write to us, we answer fast.

What cookies does Stamped set?

Stamped typically sets first party and third party cookies and may use local storage to recognise visitors, link review and loyalty activity and remember preferences. The exact names can vary by configuration and version, so audit your own storefront with browser tools to confirm what is placed. None of these are strictly necessary for the store to function.

Is consent required to use Stamped?

Yes. Because the cookies and storage are not strictly necessary and support marketing and profiling, the ePrivacy Directive and GDPR require prior consent in the EEA and the UK. The Stamped widget should be blocked until the visitor accepts, and declining must keep it fully disabled.

What is the legal basis for processing?

Consent is the appropriate legal basis for the cookies and tracking, given the marketing and loyalty context. For storing submitted reviews you may also rely on consent or, in narrow cases, legitimate interest, but the non-essential storage on the visitor device still requires consent first.

Does Stamped transfer data to the United States?

Yes. Stamped is operated from the United States, so personal data is transferred outside the EEA and the UK. These transfers rely on Standard Contractual Clauses and supplementary safeguards. Reference the transfer and its safeguards in your privacy notice and records of processing.

Do I need a DPIA for Stamped?

A DPIA is not always mandatory for a basic reviews widget, but a documented assessment is recommended because Stamped processes personal data and sends it to a third country. If you combine reviews with loyalty profiling or wider marketing, a DPIA becomes advisable.

How do I implement Stamped compliantly?

Place Stamped behind your consent manager so it loads only after the visitor agrees, classify it as marketing, sign a data processing agreement, document the transfer safeguards and list its cookies in your cookie policy. Then test that declining keeps the widget disabled.

What are the alternatives to Stamped?

Alternatives include other reviews and UGC platforms such as Okendo, Feefo, PowerReviews, Yotpo and Trustpilot. Most behave similarly and load third party scripts that set cookies, so the same consent and transfer considerations apply regardless of the provider you choose.

How do I update my cookie policy for Stamped?

List Stamped under marketing or functional cookies in your cookie policy, describe its purpose, name the provider and country, indicate the cookies and their durations, and link to the Stamped privacy policy. Keep the entry in sync with what your consent manager actually blocks and allows.

Same category

More services: E-commerce

See the whole category

Perfect Corp

Perfect Corp is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Perfect Corp enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Perfect Corp empowers marketing teams to achieve measurable growth.

Marketing

Innovorder

Innovorder is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Innovorder integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Innovorder helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Sociavore

Sociavore is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Sociavore supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Sociavore enables informed decisions that improve experience and drive results.

Analytics

Nyehandel

Nyehandel is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Nyehandel supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Nyehandel ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Omie

Omie is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Omie supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Omie ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Plotch

Plotch is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Plotch integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Plotch makes advanced AI accessible to all teams.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site