Affiliate Attribution: First-Click vs Last-Click

I'm Mihir, founder of Referralful, and one mix-up I see constantly is people confusing two completely different settings: cookie window and attribution model. Cookie window is how long a click stays valid. Attribution model is which click wins when a customer clicks more than one affiliate's link before buying. You can have a generous 60-day cookie and still pay the wrong affiliate if you haven't thought about the model at all.

This post is only about the model. Cookie duration is a separate decision, worth its own conversation, but mixing the two together is how most attribution confusion starts.

What attribution actually decides

Picture a real customer journey. Someone reads a comparison post from Affiliate A, doesn't buy, and three weeks later clicks a coupon link from Affiliate B and signs up. Both links were legitimate. Both affiliates did real work. Only one of them gets paid, and the attribution model is what decides which one.

Get this wrong and you'll end up paying commission to whoever happened to click last, coupon sites and deal aggregators mostly, while the affiliate who actually introduced the customer gets nothing. Over enough volume, that quietly trains your best content affiliates to stop investing in you, because the payoff keeps landing with someone else.

How the click actually gets tracked

Under the hood, this is simpler than it sounds. A tracking script drops a cookie on the visitor's browser the moment they click an affiliate link. That cookie stores the affiliate's id and a timestamp. When the visitor eventually pays, the system reads whatever cookie is present and credits that affiliate.

The entire first-click versus last-click debate comes down to one line of logic: what happens when a second affiliate link gets clicked by the same visitor.

• Last-click: the new click overwrites the existing cookie. The most recent affiliate always wins.
• First-click: the script checks for an existing cookie first. If one's already there, it leaves it alone, and the original affiliate keeps the credit.

That's the whole mechanism. Same tracking script, one conditional check, a completely different business outcome.

First-click attribution

First-click credits whoever got there first: the affiliate who introduced the customer to your product. It rewards top-of-funnel work like reviews, comparison articles, and walkthroughs, the kind of content that plants the seed weeks before someone actually buys.

It's the right call when your program leans on content affiliates and you want to protect them from coupon sites that show up right before checkout and capture a sale with a discount code the customer would have used anyway. The tradeoff is that disputes get harder to explain. An affiliate who sent the winning click still doesn't get paid, and that's a genuinely awkward conversation to have.

Last-click attribution

Last-click credits whoever sent the most recent click before the purchase. It's the default across most affiliate platforms, Referralful included, because it's the easiest model to explain and the hardest to argue with: whoever's link the customer clicked right before paying gets the sale.

The downside mirrors first-click's upside. Coupon aggregators and cashback sites are built to capture that final click, so a last-click program can end up funneling commission toward the affiliate closest to checkout rather than the one who did the actual convincing. If that pattern shows up in your program, it's usually a sign to look at your affiliate mix, not to switch models on a whim.

Where multi-touch fits

Multi-touch attribution splits credit across every affiliate a customer interacted with, weighted however you define it: evenly, or tilted toward the first or last touch. It's standard in paid ad platforms, where dollars per click are abstract and easy to divide.

Affiliate commissions work differently. You're paying a real percentage of a real invoice to a real person, so splitting it means deciding exact percentages per touch and running that math on every sale, every month. A handful of enterprise affiliate networks with dedicated ops teams can pull that off. For most SaaS programs, it's a lot of complexity to solve a problem that first-click or last-click already handles well enough. Start with one of those two, and add multi-touch only if you have a specific, recurring conflict it would actually fix.

Comparing the models

Model	Who gets paid	Rewards	Watch out for
First-click	The affiliate whose link was clicked first	Content, discovery, top-of-funnel work	Harder disputes when the closing affiliate feels shortchanged
Last-click	The affiliate whose link was clicked most recently	The final push before purchase	Coupon sites capturing credit for demand they didn't create
Multi-touch	Split across affiliates by a weighting rule	Every touch in the journey	Real complexity most SaaS teams don't need yet

How to actually choose

Look at how your affiliates operate, not at what sounds more sophisticated. If most of them publish content, reviews, comparisons, tutorials, first-click protects the work that actually drove the decision. If most of them are communities, newsletters, or partners sending direct signups close to purchase, last-click is simpler and matches how that traffic already behaves.

If you're still building the program from scratch, decide this at the same time you set your commission rates and cookie window, before you have affiliates whose expectations you'd be changing later. Whichever model you pick, run the numbers through an affiliate commission calculator first. The model changes who gets paid, but the rate still decides how much, and you want both settled before affiliates start sending traffic.

Not every tool lets you choose. Some affiliate program software hardcodes last-click and calls it done, which is fine until it isn't for your specific affiliate mix. Check this before you commit to a platform, not after your first attribution dispute.

How Referralful handles it

Referralful's tracking runs on a first-party cookie, set the moment someone clicks an affiliate link, valid for 60 days by default. Last-click is the default behavior: a new click updates the referral. For setups where the marketing site and the app live on separate domains, tracking runs through a referral id or a coupon code instead of relying on a shared cookie, so the attribution logic stays consistent even when the click and the sale happen on completely different domains.

That distinction, cookie window versus attribution model, is exactly why I keep separating the two in conversations with people setting up a program. They're two different dials. Set them both on purpose, not by default.

FAQ

What's the difference between attribution and cookie window?

Cookie window is how long a click stays valid. Attribution model is which click wins if a customer clicks more than one affiliate link within that window. You need to set both.

Which model do most SaaS affiliate programs use?

Last-click. It's simpler to explain to affiliates and easier to defend when someone asks why a specific sale was credited a certain way.

Can I switch attribution models after launching?

Technically yes, but avoid it. Changing the model after affiliates have built their strategy around the old one changes what gets rewarded, and that reads as moving the goalposts even if the new setting is more fair.

Does a longer cookie window mean better attribution?

No. A longer window just means clicks stay valid longer, it does not change which click wins. Model and duration are separate settings, and getting one right doesn't fix the other.

If you're setting up attribution rules for the first time, get them settled before your first affiliate sends traffic. It's a lot easier than changing the rules on someone mid-program.