Attribution PlaybookMeasurement that survives the browser

Sep 15, 2026 - Attribution Playbook

Why Your Attribution Broke: A Short History of Losing the Signal

Most ecommerce teams know their attribution is worse than it used to be. Fewer can say precisely why, which layer failed, or what a fix actually restores. The erosion came in three distinct waves, and each needs a different response.

Wave one: intelligent tracking prevention

Browser privacy features - led by Safari's ITP - capped the lifespan of cookies set by JavaScript. A shopper who clicked your ad on Monday and bought on Saturday suddenly looked like two different visitors, because the cookie that connected them expired mid-week. Effect: returning visitors were reclassified as new, and multi-touch journeys collapsed into single sessions.

Wave two: ad blockers and tracking protection

Browser extensions and built-in protections began blocking analytics and ad pixels outright. These sessions never appear in your data at all - not misattributed, just absent. Effect: reported traffic and conversions fell below reality, and the missing share skews toward technical, higher-income audiences.

Wave three: cookie deprecation and mobile identifiers

The long phase-out of third-party cookies and mobile ad IDs removed the connective tissue between platforms. Cross-site retargeting and view-through attribution - always the least reliable numbers - degraded most. Effect: platform-reported ROAS diverged further from anything a finance team can verify.

Which fix restores which loss

Wave one's fix is first-party, server-set identifiers with durable lifetimes. Wave two's fix is server-side collection - events sent from your own domain and infrastructure rather than third-party scripts the blocker recognizes. Wave three has no full fix; the honest response is first-party data plus modeled or incrementality-based measurement. The common thread: the closer tracking lives to your own infrastructure and the network edge, the more signal survives.

The Discount Code That Stole Credit From Every Other Channel

A discount code shared by an influencer gets typed in at checkout, and the attribution report hands the sale to the code's channel, even when the shopper found the store somewhere else entirely.

An influencer shares a 10 percent code with her audience. A shopper sees the code on a deal site three weeks later, types it in at checkout, and buys. The attribution report credits the influencer's channel with the sale, because the code is the tracked touchpoint, and the influencer gets paid a commission on a customer she never touched. Meanwhile the search ad that actually brought the shopper in gets nothing.

Discount codes are the leakiest attribution signal a store has. They travel: from an influencer post to a deal aggregator, from a deal aggregator to a browser extension, from a browser extension to a checkout field. Every hop keeps the code and loses the context, and the report at the end credits the code's owner for a journey she had nothing to do with.

How codes leak

The leak starts with sharing. A code meant for one audience ends up on a coupon site within days, and from there it spreads to browser extensions that auto-apply codes at checkout. The shopper never sees the influencer, never clicks her link, and still arrives at checkout with her code in the field, because the extension put it there.

The second leak is the single-use code that is not single-use. A code generated for one customer gets forwarded, screenshotted, or posted, and the store has no way to tell the original recipient from the fiftieth user. The attribution system sees the same code and credits the same channel, no matter who typed it.

What the inflated numbers do

The channel that owns the code looks like it converts far better than it does, because it is collecting sales from shoppers other channels brought in. Its budget grows, its commission bill grows, and the channels that actually did the work look worse by comparison, because their sales were stolen at the last step.

The damage shows up in the commission bill first. An influencer paid per code redemption is being paid for customers she did not bring, and the store cannot tell which redemptions were hers without matching the code to the click that preceded it. Most stores never do that match.

Fixing it

Make codes single-use and tied to a customer, not a channel. A unique code issued to one email address cannot leak usefully, because the second user who types it gets rejected. That kills the coupon-site problem at the source, though it costs the store the easy sharing that influencers like.

Then reconcile. Match code redemptions to the click path that preceded them, and report the code as a discount, not as a channel. A sale where the code was applied by a browser extension, with no influencer click in the path, belongs to the channel that brought the shopper, not to the code's owner.

Related reading: Glossary, About, Attribution for In-Store Pickup Orders Placed Online.

Frequently asked questions

Why do discount codes distort attribution?

Because codes travel. A code shared by an influencer ends up on coupon sites and in browser extensions that auto-apply it at checkout, so shoppers who never saw the influencer still check out with her code, and the report credits her channel.

What is a single-use code, and does it fix the leak?

A unique code tied to one customer email. It cannot leak usefully, because the second person who types it gets rejected. It fixes the coupon-site problem, though it costs the easy sharing influencers like.

How should a store report code redemptions?

Match each redemption to the click path that preceded it, and report the code as a discount, not as a channel. A sale where an extension applied the code, with no influencer click in the path, belongs to the channel that brought the shopper.

Why does the commission bill grow when codes leak?

Because influencers paid per code redemption get paid for customers they did not bring. The store cannot tell which redemptions were theirs without matching codes to clicks, and most stores never run that match.

Frequently asked questions

Why did attribution get so much worse so quickly?

Several supports fell at once: third party cookies declined, mobile platforms restricted tracking, consent rates cut the observable share, and journeys spread across devices. Each change removed signal the old models quietly depended on.

Is last click attribution still useful for anything?

As a rough operational signal for bottom funnel activity, cautiously. As a budget setting truth it misleads, because it credits the last touch for demand other channels created and cannot see the touches privacy changes hid.

What should replace a single attribution model?

A blend: platform data read with scepticism, controlled experiments and holdouts for big questions, and marketing mix thinking for budget level decisions. No single replacement carries the certainty the old dashboards pretended to.

How should teams talk about attribution uncertainty?

Openly, with ranges and confidence stated. Reports that admit what cannot be observed produce better budget decisions than precise numbers built on a shrinking, biased sample presented as complete.