Cookie duration in affiliate marketing: what it means and what to set
Cookie duration is the number of days after a click that a sale still counts for the affiliate. A cookie window is the same thing. Attribution is the rule that decides which affiliate gets credit for a sale. Say a reviewer sends a shopper to your store on Monday. With a 30-day window, a purchase on day 29 pays the reviewer. A purchase on day 31 does not.
An affiliate is someone who sends you buyers and earns a commission, a cut of each sale. A cookie is a small note a website saves in the shopper's browser. For an affiliate link, the note says which affiliate sent this person.
This post covers what the window means, how tracking works, what real Shopify programs state and what to set. It ends with a short note for software companies.
What does a cookie window actually do?
A shopper rarely buys on the first visit. They click a review, think about it and come back later. The cookie is how your store remembers who sent them. The window is how long that memory counts.
A short window cuts out affiliates whose readers take their time. A long window credits more of those sales to the affiliate, so you pay on more orders. You still pay only when an order is tracked to a person.
The window is a rule you write in your terms. It is not a promise about the browser. A shopper can clear cookies, switch phones or type your address straight in. Then the order has no note to match.
What is first-party and third-party tracking?
The difference is who saves the note.
- First-party: your own store's address saves the note. The shopper is on your site, and the note comes from your site.
- Third-party: a different company's address saves the note, such as a tracking company. The shopper never typed that address.
Browsers treat the two differently, and that decides how well a window holds.
Safari blocks third-party cookies by default. Apple's WebKit team announced full blocking in a post dated 24 March 2020 (WebKit blog, read 10 November 2026). Chrome has taken a different path. A Google post dated 17 October 2025 says Chrome will maintain its current approach to offering users a choice on third-party cookies (Google Privacy Sandbox, read 10 November 2026).
First-party tracking is not free of limits either. WebKit's tracking prevention page says Safari removes cookies created by scripts after 7 days of no user interaction with the site. It adds a second rule about link decoration. Some trackers add click IDs to links and read them with a script on the destination site. The page says Safari detects this and caps the expiry of cookies created in JavaScript on the landing page at 24 hours. It does not say how it detects it or which parameters count (WebKit tracking prevention, no date shown, read 10 November 2026).
We did not test any tracking app under these rules. So we can't say a 30-day window fails on Safari. We can say a long window set in an app may not hold in the browser. Our post on affiliate tracking software has an iPhone test order to run before you trust any number.
What windows do Shopify programs state?
We read the public affiliate pages of 168 Shopify brands on 23 October 2026. A script pulled the cookie length from the page text. Only 73 pages (43%) state one. The rest are silent, which does not mean they have no rule.
| Stated cookie | Pages | Share of 73 |
|---|---|---|
| 30 days | 57 | 78% |
| 60 days | 6 | 8% |
| 45 days | 3 | 4% |
| 90 days | 3 | 4% |
| 14 days | 2 | 3% |
| 21 days | 1 | 1% |
| 7 days | 1 | 1% |
Of the 73, 12 say longer than 30 days and 4 say shorter. The middle figure across all of them is 30 days. Fitness had the highest share, 14 of 21 pages. Food and drink is a small group of 10 programs, and none of them stated one.
The apps differ in what their program pages say. UpPromote pages stated a cookie length on 31 of 53 programs. GoAffPro pages did so on 22 of 54. We did not test why.
The limits are plain. We read what each page says, not what the tracking does. The stores come from our outbound list and from store lists filtered to stores with an affiliate app installed, so this is not a random sample. We kept only percentage-of-sale programs that pay in cash. In a hand check of 20 random rows, one cookie length had been missed, and we fixed it. Some errors may remain. The full method and a free CSV are on the commission rates data page. For the same numbers beside commission rates, see Shopify affiliate benchmarks 2026.
What should a Shopify brand set?
Our advice is to start at 30 days. It is the figure most pages state, so our read is that it looks standard. It is not a rule. The data shows what brands publish, not what works best.
Go longer if your buyers take weeks to decide. A mattress or a high-priced item is a fair example.
Whatever you pick, do three things:
- Write the number in your offer. An affiliate should not have to ask.
- Say what resets it. Some apps restart the window on a new click. Say whether yours does.
- Say what happens on a clash. If two affiliates send the same buyer, state who wins. First click and last click are the usual choices.
A window is one part of the offer. What commission a Shopify program should pay covers the rate, and the cookie is the second line of that deal.
A short note for software companies
SaaS means software people pay for each month or year. A free trial often sits between the click and the first payment. Our reasoning is that the window then needs to run longer.
Our post SaaS affiliate terms: cookie, clawback and payout sets out what nine software and hosting programs state. A clawback is money you take back after you have already paid it. That post's tables cover clawbacks and payout timing as well as windows.
We read those nine programs on 28 October 2026. Six state a window. Five give 60 to 180 days: HubSpot 180, Notion 180 (worded as a rule about the sale; closed to new affiliates), Semrush 120, GetResponse 90 and Kinsta 60. Systeme.io says its attribution has no expiry. Nine programs can't show a market norm. Our advice for a trial of two weeks or more is 60 to 90 days.
Where RecruitAffiliates.ai fits
The window only matters once you have affiliates to give it to. RecruitAffiliates.ai finds the people already covering shops like yours and sends the first email. It does not track sales. You still need an affiliate tool to set the window and match orders.
You enter your website. It finds blogs, review sites, newsletters, podcasts, YouTube channels, and Instagram and TikTok creators. Each one comes with the page that shows it. AI drafts a personal first email, you approve it, and it sends from your own inbox. See the Shopify page for the five steps.
Launch is $79 a month for one Shopify store, with a 7-day free trial and no card.
Frequently asked questions
What is cookie duration in affiliate marketing?
It is how many days after a click a sale still counts for the affiliate. If the shopper buys inside the window, the affiliate is paid. If they buy after it ends, they are not.
What is a good cookie duration?
Our advice is 30 days for a Shopify brand. It is the figure most pages state: 57 of the 73 we read. A longer window suits slow decisions, such as a mattress.
Does a longer cookie window cost more?
You pay only on orders that are tracked to an affiliate. A longer window can credit more of those orders to an affiliate, so it can raise what you pay. Keep it in line with how long your buyers take to decide.
Does Safari shorten the window?
It can. WebKit's page says Safari removes cookies created by scripts after 7 days of no user interaction with the site. It adds a second rule about link decoration. Some trackers add click IDs to links and read them with a script on the destination site. The page says Safari detects this and caps the expiry of cookies created in JavaScript on the landing page at 24 hours. It does not say how it detects it or which parameters count. We did not test any app, so run a test order on an iPhone.
Is Chrome removing third-party cookies?
Google's post of 17 October 2025 says Chrome will maintain its current approach to offering users a choice on third-party cookies. It does not announce removal. Safari already blocks them by default.
Is the cookie window the same as how long I pay?
No. The window is how long a click can lead to a credited sale. How long you pay is a separate term, such as repeat orders or a monthly fee. Write both down.
Sources
- WebKit, Full Third-Party Cookie Blocking and More, 24 March 2020, read 10 November 2026
- WebKit, Tracking Prevention, no date shown, read 10 November 2026
- Google Privacy Sandbox, Update on plans for Privacy Sandbox technologies, 17 October 2025, read 10 November 2026
- Shopify affiliate commission rates 2026, 168 programs read on 23 October 2026
- SaaS affiliate terms: cookie, clawback and payout, nine programs read on 28 October 2026