Cookie Window in iGaming: Definition, How It Works and Why It Drives Affiliate Disputes
Cookie Window is the time period during which an affiliate's tracking cookie remains valid for attributing player events back to that affiliate. If a player clicks an affiliate link, browses, leaves and returns to register four days later, whether that registration is attributed to…
TL;DR
Cookie Window is the time period during which an affiliate's tracking cookie remains valid for attributing player events back to that affiliate. If a player clicks an affiliate link, browses, leaves and returns to register four days later, whether that registration is attributed to the affiliate depends on the cookie window. Cookie windows of 30 to 90 days are typical, with the exact length being one of the most negotiated terms in affiliate contracts.
How it works
When a player clicks an affiliate's tracking link, the operator sets a cookie in the player's browser identifying the source affiliate. Subsequent events from that browser (registration, deposit, wager) are attributed to the affiliate as long as the cookie is valid. The cookie window is the duration of that validity, typically measured in days.
Common cookie window lengths:
- 30 days: tight window, common for high-volume comparison and aggregator traffic.
- 60 days: standard for most affiliate contracts.
- 90 days: extended window, often for content affiliates whose audiences convert slowly.
- 180 days or longer: rare, typically negotiated by premium affiliates with strong brand associations.
Modern attribution increasingly uses server-side tracking and player-identity-based attribution rather than browser cookies, but the term "cookie window" persists as the industry shorthand for attribution duration.
Why it matters in iGaming
Cookie Window directly determines which affiliate gets paid for which player. A 30-day window means players who take longer than 30 days to convert are not attributed to any affiliate (or are attributed only to the most recent click). A 90-day window captures slower-converting traffic but increases attribution liability for the operator and complicates multi-touch attribution.
Different participants care about cookie window differently:
- Affiliates running content-driven campaigns prefer longer windows because their audiences typically convert over weeks rather than days.
- Volume affiliates running comparison or display traffic prefer shorter windows because their conversions happen quickly.
- Operators negotiate windows that balance affiliate competitiveness against attribution complexity and cost.
- Compliance teams care about cookie window primarily for data protection (cookie consent, GDPR) rather than commercial economics.
Cookie windows are also one of the most common sources of operator-affiliate dispute. Affiliates running 60-day cookies see different attributions than operators tracking 30-day windows. Both calculations are right under their own rules. Aligning windows in contracts and verifying tracking parity prevents most of these disputes.
Common mistakes and how teams get cookie windows wrong
Mismatched windows between operator and affiliate. If the affiliate platform tracks 60-day cookies and the operator tracks 30-day windows, monthly settlements will disagree systematically. Both are technically correct under their own rules; alignment in the contract prevents recurring disputes.
Treating cookie window as static after contract signing. Player behaviour, regulation (cookie consent, ITP, browser changes) and competitive dynamics all evolve. Cookie windows that worked at contract signing may misalign 18 months later. Periodic review prevents drift.
Ignoring cross-device complications. A click from a mobile browser today and a registration from a desktop browser next week may not be linked under cookie-only attribution. Modern operators use logged-in user identity to bridge devices, but cookie-only attribution misses these conversions entirely.
Conflating cookie window with attribution model. Cookie window is a duration. Attribution model (last-click, first-click, multi-touch) is a separate question. The same 60-day window can produce different attributions under different models. Both need explicit specification.
Privacy regulation drift. Browser-level privacy changes (Safari ITP, Chrome cookie deprecation) and privacy regulation evolution materially affect cookie persistence. Operators relying on assumed cookie behaviour without monitoring real-world tracking effectiveness lose attribution silently.
Healthy patterns and what good looks like
Cookie window practices observed in well-run affiliate programmes:
- Standard 60-day windows for most affiliates, with 90 days for premium content partners and 30 days for fast-convert volume traffic.
- Server-side tracking complementing browser cookies to handle privacy-restricted environments and cross-device journeys.
- Logged-in user identity bridging across devices and sessions for authenticated traffic.
- Periodic cookie window review (annually or biannually) to keep attribution aligned with current player behaviour and browser environment.
- Explicit cookie window specification in affiliate contracts, with reconciliation mechanism for disputes.
How Gamblitude handles cookie windows
Cookie window logic is implemented at the operator's tracking layer; Gamblitude consumes the resulting attribution events and exposes them in governed views. The platform supports per-affiliate variants of attribution windows when contracts differ, and surfaces window-related discrepancies through reconciliation reports comparing affiliate platform attribution against operator attribution. Insight Radar flags affiliates whose attribution patterns shift unexpectedly, often signalling tracking issues or window misalignment before they generate monthly disputes.
FAQ
60 days is the most common standard. Premium content affiliates often negotiate 90 days. Volume traffic typically operates on 30 days. Cookie windows above 90 days are rare in modern contracts.
Cookie window is a duration (how long the cookie is valid). Attribution model is a logic (which click gets credit when multiple are valid). Both need to be specified in contracts. The most common combination is 60-day cookie window with last-click attribution.
Significantly. Safari's Intelligent Tracking Prevention has reduced effective cookie lifespans on Apple devices. Chrome's planned third-party cookie deprecation affects cross-domain tracking. Operators relying on browser cookies alone are losing attribution silently. Server-side tracking and logged-in user identity bridging mitigate but don't fully solve this.
Not directly, but cookie window mismatches between operator and affiliate platforms can produce different attribution results that look like double-counting in reconciliation. The fix is contract alignment and tracking parity, not chasing individual disputes.
Often no. Different affiliate types deliver different traffic with different conversion timing. Premium content traffic justifies longer windows. Volume comparison traffic justifies shorter windows. Uniform windows either overpay volume affiliates or underserve content affiliates.
Further reading
Found a mistake or want a term added to the iGaming Glossary? Let us know.
Browse the complete glossary or see how governed definitions work across dashboards, reports, alerts and AI answers.