2amz is a link shortener with coupon landing pages. This page explains what we collect when someone opens one of those links, and what we hold about the people who create them.
Visitors to a short link
Opening a deal page sets no cookies, and we do not track anyone across days or across sites.
When a landing page is opened we record:
- which link was opened, and whether the code was copied or the store visited
- country and region, looked up from the IP address against a database held on our own server
- device type, operating system and browser, read from the user agent
- the referring website, if the browser sends one
- a one-way hash of the IP address, user agent and a salt that changes every day and is then discarded
IP addresses are never stored. The location lookup happens in memory and keeps only the country and region; the address itself is never written down and is not sent to anyone else. The daily salt means the hash cannot be linked back to a person, and cannot be matched across days — so “unique visitors” is only ever a per-day figure.
Legal basis: legitimate interest in measuring whether a promotion works (Art. 6(1)(f) GDPR). A record of that assessment is kept on file.
IP geolocation by DB-IP, used under CC BY 4.0.
Individual records are deleted after 90 days. Daily totals are kept longer; they identify nobody.
Cookies and local storage
One thing is stored on your device when you open a deal page: a random id under _2amz_s, held in your browser’s sessionStorage. It links the steps of a single visit — page opened, code copied, store visited — so that they count as one person doing three things rather than three people doing one. It says nothing about who you are, it is never sent to anyone else, and it is erased the moment the tab is closed.
No consent banner is shown for it. We rely on the exemption for strictly first-party audience measurement: the id is used only to count what happened on this page, is never combined with anything from another site, never reaches an advertising network, and does not outlive the visit.
If you have a 2amz account, signing in sets a session cookie. That cookie is what keeps you signed in and does nothing else, so it is strictly necessary and needs no consent. Your choice of light or dark theme is remembered in localStorage on your own device.
A seller may switch on their own Google tag for their deal pages, so that Google can measure the ads they run. Where one is switched on, opening that page sends your IP address and the page’s address to Google. We run it in Google’s cookieless mode with advertising and analytics storage denied by default, which means it stores nothing on your device and cannot follow you to another site. It is never loaded on the dashboard, and never on a page whose seller has not switched it on.
To clear any of it, use your browser’s “clear site data” setting. Refusing the session cookie means you cannot stay signed in; deal pages work either way.
Account holders
We hold the email address, the products and links created, uploaded images and the statistics for those links. This data is used to operate the service and nothing else. It is never sold or shared for advertising.
You can download everything we hold from Settings → Your data, and close the account from the same page, which erases it immediately.
Where the data lives
On servers in the United States (Hetzner, Ashburn, Virginia), with our hosting provider acting as processor. If you are in the EU or UK, your data is therefore transferred outside it. Transfer mechanism: [TRANSFER MECHANISM].
Who else sees it
Hetzner hosts the servers. Cloudflare handles DNS, sits in front of every request and routes our email. Resend sends the confirmation and password emails. All three act as processors. No third-party fonts are loaded anywhere.
Google receives a request from your browser only on deal pages whose seller has switched on their own tag, and only so that Google can measure the ads that seller runs. There it acts as its own controller, not as our processor. On every other page — and on every deal page with no tag switched on — nothing third-party loads.
Your rights
Access, correction, erasure, portability and objection under the GDPR. The export and account-closure controls in Settings cover most of these directly. For anything else, write to [email protected].
Contact
2amz is run by one person. A registered business is being set up; its name and address will be published here once it exists. Until then, write to [email protected] — it reaches the person responsible for everything on this page.