> How Zaxaa tracks affiliate sales, what cookies it sets and how to keep Zaxaa compliant with GDPR, ePrivacy and US data transfer rules for EU sellers. > > Canonical: https://www.flowconsent.com/en/services/ecommerce/zaxaa E-commerce # Zaxaa Marketing · [Official website](https://zaxaa.com) Zaxaa is a US digital sales platform aimed at info product creators and affiliates. It hosts checkout pages, manages a buyer database, runs an affiliate program with cookie based attribution, and ships a basic email autoresponder. For EU sellers, Zaxaa raises GDPR and ePrivacy obligations on affiliate tracking, US data transfers, and lawful basis for marketing emails to buyers. [Block Zaxaa until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [E-commerce](https://www.flowconsent.com/en/services/ecommerce) - Consent Marketing - Prior consent Required - Documented cookies 2 - Third-party domains 3 - Servers United States. Zaxaa is US based with infrastructure in US cloud regions. Overview ## What does Zaxaa do? ## **What Zaxaa is** Zaxaa is a US sales and affiliate platform for info product creators, course sellers and digital agencies. It hosts checkout pages, processes payments via Stripe and PayPal, manages a buyer database, runs an affiliate program with cookie based attribution and offers a basic email autoresponder. ## **Data collected** Buyer email, name, billing address, payment data handled by Stripe and PayPal, affiliate click identifiers, IP, user agent, referrer, affiliate cookies, order data, subscription status and email engagement. ## **GDPR and ePrivacy** Affiliate tracking cookies are advertising related and require prior consent under article 5(3) ePrivacy. Order processing relies on performance of contract. Marketing emails to buyers rest on consent or the soft opt in. ## **Consent** Block the affiliate cookie until consent is captured. Capture a separate, explicit marketing opt in at checkout for messages beyond strictly transactional. Provide one click unsubscribe and a preference centre. ## **International transfers** Zaxaa stores buyer and affiliate data in the US. Transfers rely on SCCs, EU US DPF where applicable, and supplementary measures. Stripe and PayPal as sub processors operate global infrastructure with their own transfer mechanisms. ## **Practical steps** Sign a DPA, document Stripe and PayPal as sub processors, gate the affiliate cookie behind consent, capture marketing opt in separately, set retention on inactive buyers, document the affiliate program in the privacy notice, and respect EU consumer protection (right of withdrawal for digital products). Compliance ## Zaxaa and the GDPR Zaxaa is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Zaxaa affiliate tracking writes cookies and shares identifiers with a third party for marketing. Article 5(3) ePrivacy requires prior consent. Checkout and order processing rely on performance of contract. - Risk level high - Applicable regulations GDPR, ePrivacy Directive, national cookie laws, EU US Data Privacy Framework, consumer protection rules (Directive 2011/83/EU). ### Impact assessment (DPIA) A DPIA may be appropriate when Zaxaa is used at scale to profile buyers across multiple products or to drive automated upsells. Document the affiliate tracking, retention, US transfer and the email marketing flow. ### Sample text for your banner > We use Zaxaa to process digital sales and run our affiliate program. Zaxaa stores cookies for affiliate attribution and transfers your order data to the United States under Standard Contractual Clauses. Affiliate tracking cookies are activated only with your consent. Cookies and trackers ## What Zaxaa sets and contacts - Tracking method Digital product sales and affiliate platform. Zaxaa provides hosted checkout pages, affiliate tracking via JavaScript and first party cookies, click and order attribution, and an integrated email autoresponder for buyers. - Server location United States. Zaxaa is US based with infrastructure in US cloud regions. - Data transferred outside the EU Buyer and affiliate data of EU users is transferred to the United States. Transfers rely on Standard Contractual Clauses and on the EU US Data Privacy Framework where Zaxaa is certified. ### Cookies set (2) | Name | Type | Duration | Purpose | | ----------- | ---------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ | | zaxaa\_aff | persistent | 60 days | Zaxaa affiliate tracking cookie used to remember which affiliate referred the visitor and to credit the commission on the next sale. Requires consent. | | zaxaa\_cart | session | session | Session cookie used by Zaxaa to maintain checkout state across pages. Strictly necessary for the order flow. | ### Third-party domains contacted (3) - `zaxaa.com` - `checkout.zaxaa.com` - `app.zaxaa.com` Questions ## Frequently asked questions about Zaxaa Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Zaxaa set? Zaxaa sets an affiliate tracking cookie on the seller's pages to remember which affiliate referred the visitor, plus session and checkout cookies that are strictly necessary for the order flow. The affiliate cookie is marketing related and requires prior consent. ### Does Zaxaa require consent? The affiliate tracking cookie requires prior consent under article 5(3) ePrivacy. Strictly necessary checkout cookies do not. Marketing emails to buyers require consent or the soft opt in for existing customers. ### What is the legal basis for Zaxaa? Affiliate cookie: consent. Order processing: performance of contract. Marketing emails: consent or soft opt in. Profiling for upsells: consent if it leads to significant decisions or sensitive segments. ### Does Zaxaa transfer data to the US? Yes. Buyer and affiliate data is stored on US infrastructure. Transfers rely on SCCs and the EU US Data Privacy Framework where Zaxaa is certified, with supplementary measures. ### Do we need a DPIA for Zaxaa? A DPIA can be appropriate for large catalogues with cross product profiling or automated upsells. Document the affiliate flow, retention, US transfer, sub processors (Stripe, PayPal) and the marketing automation. ### How do we implement Zaxaa compliantly? Sign the DPA, gate the affiliate cookie behind consent, collect marketing opt in separately at checkout, retain only what is needed for accounting and tax, document Zaxaa, Stripe and PayPal in the records of processing and respect EU consumer rights. ### What alternatives to Zaxaa exist? EU friendly alternatives include Lemon Squeezy (US, EU optimised), Paddle (UK), FastSpring (US, EU DPF), Stripe Payment Links with a custom affiliate solution, Tapfiliate (Netherlands), and ThriveCart with EU connectors. ### How do we update the cookie policy when using Zaxaa? List the Zaxaa affiliate cookie and any session cookies with vendor, purposes, retention and legal basis. State the transfer to the United States. Update whenever you add new payment or marketing sub processors. Same category ## More services: E-commerce [See the whole category](https://www.flowconsent.com/en/services/ecommerce) ### [Planfy](https://www.flowconsent.com/en/services/ecommerce/planfy) [Planfy is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Planfy supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Planfy ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/planfy) [Preferences](https://www.flowconsent.com/en/services/ecommerce/planfy) · ### [Chronopost](https://www.flowconsent.com/en/services/ecommerce/chronopost) [Chronopost is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Chronopost supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Chronopost ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/chronopost) [Preferences](https://www.flowconsent.com/en/services/ecommerce/chronopost) · ### [Afosto](https://www.flowconsent.com/en/services/ecommerce/afosto) [Afosto is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Afosto integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Afosto helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/afosto) [Preferences](https://www.flowconsent.com/en/services/ecommerce/afosto) · ### [Salesfloor](https://www.flowconsent.com/en/services/ecommerce/salesfloor) [Salesfloor is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Salesfloor integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Salesfloor helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/salesfloor) [Preferences](https://www.flowconsent.com/en/services/ecommerce/salesfloor) · ### [BSmart](https://www.flowconsent.com/en/services/ecommerce/bsmart) [BSmart is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. BSmart supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, BSmart ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/bsmart) [Preferences](https://www.flowconsent.com/en/services/ecommerce/bsmart) · ### [Addi](https://www.flowconsent.com/en/services/ecommerce/addi) [Addi is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Addi supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Addi ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/addi) [Preferences](https://www.flowconsent.com/en/services/ecommerce/addi) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)