Hacker News Reader

If you or the seller are in the EU, you could report this to the data regulator.

(One for Amazon sharing the address, one for the seller sending the unsolicited card, once more for the Facebook message without data collection consent.)

View on HN

I assume the Facebook message is through a Facebook bot running embedded on the website. It won't automatically collect your data until you interact with it and that falls under the Facebook privacy policy since the individual site doesn't have access to anything more than your Facebook name and public profile picture.

Reply on news.ycombinator.com