What Is an Affiliate Tracking Link?

Anatomy of a tracking link

Take an illustrative link: https://example.com/pricing?ref=partner123&sub1=newsletter-oct&utm_source=partner. It has four parts.

• Destination: example.com/pricing, the page the visitor should land on.
• Partner identifier: ref=partner123, the value that says which partner sent the visitor. Platforms name it differently (ref, aff, via, pid, tag), but the job is the same.
• Sub-IDs: sub1=newsletter-oct, free-text values the partner adds to see which of their own placements worked. They do not change who is credited.
• Analytics parameters: utm_source=partner, which label traffic in your analytics. UTMs on their own do not credit or pay anyone.

Some links also carry a click ID: a unique value generated for that single click, which becomes the key that ties a later sale back to it.

Redirect links and direct links

There are two ways a tracking link records the click.

Redirect links point at the tracking platform's own domain. The platform logs the click, generates a click ID, and redirects the visitor to the merchant with that ID appended to the URL. Everflow's help centre, for example, describes reading a transaction ID from the landing page URL as _ef_transaction_id, which depends on how the destination URL macros are configured.

Direct links point straight at the merchant's page with the partner parameter attached. A script on the merchant's site reads it, records the click, and stores the identifier in a first-party cookie or local storage.

Redirects add a hop that can be slowed, stripped, or blocked; direct links depend on the merchant's script loading. Either way, the identifier has to be stored somewhere that survives until the visitor converts.

Click IDs and server-side postbacks

A click ID turns tracking into a server-to-server problem. The merchant saves the click ID with the lead or account. When the visitor converts, the merchant's server calls the platform's postback URL with that click ID, plus details such as the sale amount. No browser, cookie, or pixel is involved at that step, so ad blockers and cookie limits do not affect it.

Everflow describes its version this way: each click gets a 32-character transaction ID tied to the partner and offer. Its data retention policy keeps raw click data for 90 days, while high-level click data and the transaction ID in granular reporting are kept for two years, so the advertiser should store the ID rather than expect to look it up later. Long B2B sales cycles therefore need the ID saved on the account early, at signup or lead capture, not looked up at the end.

Deep links

A deep link sends the visitor to a specific page rather than the homepage: a pricing page, a product, a comparison, or a signup screen with a plan preselected. Most platforms let partners generate a tracking link for any URL on the merchant's site, which matters because a reader who lands on the page the article described converts more often than one who has to look for it. On mobile, a deep link can open an app at a specific screen, and a deferred deep link carries the destination through an app install.

Link cloaking and vanity links

In affiliate marketing, "link cloaking" usually means a short, readable redirect on the partner's own site, such as partnersite.com/go/tool, which forwards to the full tracking URL. Partners use it to keep links readable, to update every placement in one place when a program changes, and to make the partner ID harder to strip.

That is different from cloaking in Google's spam policies, which means presenting different content to users and search engines, and from sneaky redirects, which send users somewhere other than what they expected. A vanity redirect that lands where the reader expects is fine; one that hides the destination or swaps it is not. Either way, the link still needs a clear disclosure under the FTC's Endorsement Guides, and Google asks publishers to mark advertisements and paid placements with rel="sponsored".

What a tracking link cannot do

A link records the start of a journey, not the end. Cookies expire or are cleared, buyers switch from phone to laptop, enterprise deals close on an invoice weeks later, and a reader who met you through a partner may come back by typing your URL. Each of these breaks the chain between click and payment. That is why programs pair links with referral or coupon codes, server-side events, and partner binding on the customer account. The full picture is in how affiliate tracking works.

It is also why clicks are a weak measure of a partner. Earnings per click is useful for partners comparing programs, but a program should judge partners on the revenue their links eventually produce.

Tracking link abuse

Because the link is what earns credit, it is what fraud targets. Common patterns include cookie stuffing, where a page silently loads a tracking link so a cookie is set without a real click; parameter hijacking, where the partner ID in someone else's link is replaced; click spam to inflate counts; and self-referral, where a partner clicks their own link to earn on their own purchase. Server-side checks, holds past the refund window, and paying only on revenue blunt most of them. See how to detect affiliate fraud.