E-commerce

Zaxaa

Zaxaa is a US digital sales platform aimed at info product creators and affiliates. It hosts checkout pages, manages a buyer database, runs an affiliate program with cookie based attribution, and ships a basic email autoresponder. For EU sellers, Zaxaa raises GDPR and ePrivacy obligations on affiliate tracking, US data transfers, and lawful basis for marketing emails to buyers.

Overview

What does Zaxaa do?

What Zaxaa is

Zaxaa is a US sales and affiliate platform for info product creators, course sellers and digital agencies. It hosts checkout pages, processes payments via Stripe and PayPal, manages a buyer database, runs an affiliate program with cookie based attribution and offers a basic email autoresponder.

Data collected

Buyer email, name, billing address, payment data handled by Stripe and PayPal, affiliate click identifiers, IP, user agent, referrer, affiliate cookies, order data, subscription status and email engagement.

GDPR and ePrivacy

Affiliate tracking cookies are advertising related and require prior consent under article 5(3) ePrivacy. Order processing relies on performance of contract. Marketing emails to buyers rest on consent or the soft opt in.

Consent

Block the affiliate cookie until consent is captured. Capture a separate, explicit marketing opt in at checkout for messages beyond strictly transactional. Provide one click unsubscribe and a preference centre.

International transfers

Zaxaa stores buyer and affiliate data in the US. Transfers rely on SCCs, EU US DPF where applicable, and supplementary measures. Stripe and PayPal as sub processors operate global infrastructure with their own transfer mechanisms.

Practical steps

Sign a DPA, document Stripe and PayPal as sub processors, gate the affiliate cookie behind consent, capture marketing opt in separately, set retention on inactive buyers, document the affiliate program in the privacy notice, and respect EU consumer protection (right of withdrawal for digital products).

Compliance

Zaxaa and the GDPR

Zaxaa is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Zaxaa affiliate tracking writes cookies and shares identifiers with a third party for marketing. Article 5(3) ePrivacy requires prior consent. Checkout and order processing rely on performance of contract.
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, national cookie laws, EU US Data Privacy Framework, consumer protection rules (Directive 2011/83/EU).

Impact assessment (DPIA)

A DPIA may be appropriate when Zaxaa is used at scale to profile buyers across multiple products or to drive automated upsells. Document the affiliate tracking, retention, US transfer and the email marketing flow.

Sample text for your banner

We use Zaxaa to process digital sales and run our affiliate program. Zaxaa stores cookies for affiliate attribution and transfers your order data to the United States under Standard Contractual Clauses. Affiliate tracking cookies are activated only with your consent.
Cookies and trackers

What Zaxaa sets and contacts

Tracking method
Digital product sales and affiliate platform. Zaxaa provides hosted checkout pages, affiliate tracking via JavaScript and first party cookies, click and order attribution, and an integrated email autoresponder for buyers.
Server location
United States. Zaxaa is US based with infrastructure in US cloud regions.
Data transferred outside the EU
Buyer and affiliate data of EU users is transferred to the United States. Transfers rely on Standard Contractual Clauses and on the EU US Data Privacy Framework where Zaxaa is certified.

Cookies set (2)

NameTypeDurationPurpose
zaxaa_affpersistent60 daysZaxaa affiliate tracking cookie used to remember which affiliate referred the visitor and to credit the commission on the next sale. Requires consent.
zaxaa_cartsessionsessionSession cookie used by Zaxaa to maintain checkout state across pages. Strictly necessary for the order flow.

Third-party domains contacted (3)

  • zaxaa.com
  • checkout.zaxaa.com
  • app.zaxaa.com
Questions

Frequently asked questions about Zaxaa

Can't find your question? Write to us, we answer fast.

What cookies does Zaxaa set?

Zaxaa sets an affiliate tracking cookie on the seller's pages to remember which affiliate referred the visitor, plus session and checkout cookies that are strictly necessary for the order flow. The affiliate cookie is marketing related and requires prior consent.

Does Zaxaa require consent?

The affiliate tracking cookie requires prior consent under article 5(3) ePrivacy. Strictly necessary checkout cookies do not. Marketing emails to buyers require consent or the soft opt in for existing customers.

What is the legal basis for Zaxaa?

Affiliate cookie: consent. Order processing: performance of contract. Marketing emails: consent or soft opt in. Profiling for upsells: consent if it leads to significant decisions or sensitive segments.

Does Zaxaa transfer data to the US?

Yes. Buyer and affiliate data is stored on US infrastructure. Transfers rely on SCCs and the EU US Data Privacy Framework where Zaxaa is certified, with supplementary measures.

Do we need a DPIA for Zaxaa?

A DPIA can be appropriate for large catalogues with cross product profiling or automated upsells. Document the affiliate flow, retention, US transfer, sub processors (Stripe, PayPal) and the marketing automation.

How do we implement Zaxaa compliantly?

Sign the DPA, gate the affiliate cookie behind consent, collect marketing opt in separately at checkout, retain only what is needed for accounting and tax, document Zaxaa, Stripe and PayPal in the records of processing and respect EU consumer rights.

What alternatives to Zaxaa exist?

EU friendly alternatives include Lemon Squeezy (US, EU optimised), Paddle (UK), FastSpring (US, EU DPF), Stripe Payment Links with a custom affiliate solution, Tapfiliate (Netherlands), and ThriveCart with EU connectors.

How do we update the cookie policy when using Zaxaa?

List the Zaxaa affiliate cookie and any session cookies with vendor, purposes, retention and legal basis. State the transfer to the United States. Update whenever you add new payment or marketing sub processors.

Planfy

Planfy is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Planfy supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Planfy ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Chronopost

Chronopost is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Chronopost supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Chronopost ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Afosto

Afosto is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Afosto integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Afosto helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Salesfloor

Salesfloor is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Salesfloor integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Salesfloor helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

BSmart

BSmart is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. BSmart supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, BSmart ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Addi

Addi is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Addi supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Addi ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.