Affiliate Cookie Duration Statistics: What Programs Offer in 2026

The real distribution of cookie windows across 134 programs with stated terms, and how to judge whether a window is long enough for your audience.

Published July 17, 2026

The median affiliate cookie window in our directory is 45 days. 45% of programs sit exactly at 30 days, 42% offer 31 to 90 days, and 12% offer more than 90 days. 6 programs advertise lifetime attribution. These numbers are computed from the live dataset of 160 programs every time this page builds; 26 listings state no usable window and are excluded rather than guessed.

The distribution

Cookie windows across every program in the directory that states one:

Cookie windowProgramsShare
Under 30 days21%
30 days (the default)6045%
31 to 60 days3022%
61 to 90 days2619%
91 to 180 days86%
Over 180 days86%

The longest stated windows in the directory right now:

ProgramCookieCategory
DreamHostlifetimeHosting
MailerLitelifetimeEmail Marketing
MangoolslifetimeSEO Tools
MoosendlifetimeEmail Marketing
Systeme.ioLifetimeSaaS

At the other end of the scale sit the sub-day windows. The most famous is Amazon Associates at 24 hours, and travel booking programs often use session-only attribution: the visitor books in that sitting or you earn nothing. Those short windows are not stinginess for its own sake; they reflect how those products are bought, which is the key to reading this whole table.

Cookie windows by category

The window a program offers correlates with its category, because the window is really a statement about how long the merchant believes their buyers deliberate. Median stated window per category, computed from the live data:

CategoryPrograms with stated windowsMedian window
SaaS1960 days
AI Tools1760 days
SEO Tools1060 days
Email Marketing9120 days
Hosting1360 days
VPN1130 days
Education830 days
Finance1230 days
Design430 days
Ecommerce730 days

Two readings of this table are useful. Within a category, a program offering meaningfully more than the category median is paying for conversions its competitors let expire, which is a real edge when you promote in that category. And across categories, the medians tell you where window length is a live negotiating dimension (B2B-leaning software) versus where it is a fixed convention nobody competes on.

What a cookie window mechanically is

When a visitor clicks your affiliate link, the program (or its network) drops an identifier in the visitor's browser and usually logs the click server side with a click ID. That identifier says: this person arrived through this affiliate. If the visitor completes a purchase before the identifier expires, the sale is attributed to you and the commission enters your pending balance. After expiry, the same purchase pays you nothing.

Three details decide how that plays out in practice:

Why 30 days became the default

No standards body picked 30 days. It won because it is the schelling point between two pressures: long enough to cover the deliberation cycle of a typical software purchase (research, trial, one billing thought), short enough that merchants are not paying commissions on sales their own remarketing would have closed anyway. Once the biggest networks shipped 30 days as the default field value, thousands of programs simply never changed it.

That means a 30-day cookie tells you nothing about a program except that it took the default. The information is in the deviations. A program that chose 90 or 120 days is signaling it wants affiliates enough to pay for conversions it might have gotten free, the way Frase (120 days) and Leadpages (90 days) do. A program that chose 7 days is telling you it only values the click-to-checkout handoff.

When a short cookie is fine, and when it kills the deal

Match the window to the deliberation time of the purchase, not to a universal standard:

To see what a window is worth in your own numbers, our cookie window calculator models how much attributed revenue different durations capture given your audience's conversion lag. It makes the trade concrete in about a minute.

Attribution models: last click is the default, not the law

The cookie window says how long attribution lasts; the attribution model says who wins when several affiliates touched the same buyer. Knowing the model changes which content is worth producing.

Last click is the overwhelming default: whoever owns the most recent click before purchase takes the whole commission. It structurally favors bottom-of-funnel content (comparisons, reviews, deal pages) and punishes top-of-funnel education, because the person who taught the buyer loses to the person who caught them at checkout.

First click credits the affiliate who introduced the buyer, however long ago within the window. Rare, but where it exists it inverts the incentive: tutorials and discovery content become the winning formats. Programs advertise it when they have it, because it is a recruiting advantage with content publishers.

Coupon and code attribution bypasses clicks entirely: the buyer enters your code at checkout and the sale is yours regardless of cookies. It survives every browser restriction and every competing click, which is why creator-focused programs lean on it. If a program offers you a code alongside a link, the code is the more durable asset.

Account-based (lifetime) attribution ties the referral to the account created after your click, as covered above. The practical consequence for content: your job becomes getting the free signup, not the purchase, which suits products with generous free tiers.

Matching content type to window length

The window you need depends on what your content does to the buyer, and you can chart it fairly precisely:

Cookie length interacts with commission size

Never read the cookie column alone. A program paying 40% behind a 24-hour window and a program paying 25% behind 90 days can be the same effective rate once you account for how many of your conversions each window actually captures. The math is simple: effective rate = stated rate × share of your conversions that happen inside the window. For a high-deliberation audience, the second program wins comfortably; for an impulse audience, the first does.

This is also why headline-rate comparisons between competing programs mislead. Rate ranges by category are in our commission rates data, and the recurring dimension (which dwarfs both rate and cookie over a year) is worked through in recurring vs one-time commissions.

Questions to ask beyond the number

Methodology

Every count and share on this page is computed at build time from the affiliatejob directory: 160 programs total, of which 134 state a concrete cookie window and enter the distribution. The 26 programs with no stated or applicable window (some finance and CPA programs attribute per action without a browser window at all) are excluded rather than estimated. Windows are as programs state them; browser privacy features can shorten real-world persistence below any stated figure, and we make no claim about effective in-browser lifetimes. The dataset is public at /data/programs.json, and changes to any program's cookie terms appear on the changelog.

FAQ

How long does the average affiliate cookie last?
Across the 134 programs in our directory with a stated cookie window, the median is 45 days, and 45% sit exactly at 30 days. About 54% offer longer than 30 days. Windows shorter than 30 days are rare in software but standard in travel and physical retail.
What does an affiliate cookie actually do?
When someone clicks your link, the program stores a small identifier in the visitor's browser recording that you referred them. If that visitor buys before the cookie expires, the sale is credited to you. Buy on day 31 of a 30-day cookie and you earn nothing, which is why the window matters as much as the rate.
What happens if a visitor clicks two different affiliates' links?
Almost every program uses last-click attribution: the most recent affiliate link clicked before purchase gets the whole commission. Your cookie is overwritten the moment the visitor clicks someone else's link, even if you introduced them to the product first.
Is a lifetime cookie really lifetime?
Usually it means the referral is tied to the account the visitor creates, not to a browser cookie at all. That survives cleared cookies and device switches. But read the terms: some programs quietly attach conditions, like the account needing to convert within a period, or the tie breaking if the customer goes through support to change plans.
Do cookies still work with browser tracking protection?
Browser rules like Safari's ITP cap some cookie lifetimes and blockers strip some requests, so a stated 90-day window is an upper bound, not a guarantee. Programs increasingly track referrals server side with click IDs tied to signup, which does not depend on the browser remembering anything. Networks like Impact and PartnerStack lean on first-party and server-side methods for exactly this reason.
Is a longer cookie always better?
All else equal, yes, but all else is never equal. Cookie length matters in proportion to how long your audience deliberates. Impulse products convert in hours, so a 24-hour cookie costs little. High-ticket B2B tools have weeks-long buying cycles, and a 30-day cookie can silently forfeit a third of your real conversions.