Advertising

Affilo

How Affilo handles cookies and personal data, and what European websites must do to use it in a GDPR and ePrivacy compliant way.

Overview

What does Affilo do?

What Affilo is

Affilo is a affiliate marketing and tracking network. It is an affiliate marketing network that tracks referral clicks and conversions so advertisers can reward publishers. When it runs on a website it operates as a third party processor whose scripts, cookies and network requests are loaded into the browsers of your European visitors.

Data and cookies Affilo collects

In a typical deployment Affilo processes click and conversion identifiers, referral data, device fingerprints and cross site behavioural signals. Most of this information qualifies as personal data under the GDPR because it can be linked to an identifiable person, directly or through online identifiers stored on the device.

GDPR and ePrivacy implications

Any storage of or access to information on a visitor device is governed by Article 5(3) of the ePrivacy Directive, transposed into national law across the EU. The GDPR then governs the subsequent processing, so Affilo must have a valid legal basis, a clear retention period and transparent information for the data subject.

Consent requirements

Because Affilo sets cookies or identifiers that are not strictly necessary to deliver a service the visitor explicitly requested, prior, freely given, specific and informed consent is required before it loads. Scripts must stay blocked until the visitor accepts, and refusal must be as easy as acceptance.

International data transfers

Affilo operates affiliate tracking across multiple regions and may process identifiers on servers outside the European Economic Area. Transfers of personal data outside the European Economic Area need an appropriate safeguard such as an adequacy decision or Standard Contractual Clauses, together with a transfer impact assessment where required.

Practical compliance steps

List Affilo in your records of processing and your cookie policy, load it only through a consent management platform, document the consent you collect and review the vendor data processing agreement at least once a year. Test the site with consent refused to make sure no identifier is set before a choice is made.

Compliance

Affilo and the GDPR

Affilo is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR) together with Art. 5(3) ePrivacy Directive for non essential cookies
Risk level
high
Applicable regulations
GDPR; ePrivacy Directive 2002/58/EC; national rules (TTDSG, CNIL guidelines, LSSI)

Impact assessment (DPIA)

Assess the volume and sensitivity of data processed through Affilo, whether visitors are profiled or tracked across sites, and any transfer outside the EEA. A formal DPIA is advisable where Affilo enables large scale monitoring or combines data from several sources.

Sample text for your banner

We use Affilo to power parts of this site. It may store cookies and identifiers on your device and process related data. With your consent we activate Affilo. You can withdraw your consent at any time from the cookie settings.
Cookies and trackers

What Affilo sets and contacts

Tracking method
Persistent tracking cookies and conversion pixels
Server location
servers outside the European Economic Area
Data transferred outside the EU
Affilo operates affiliate tracking across multiple regions and may process identifiers on servers outside the European Economic Area.

Cookies set (3)

NameTypeDurationPurpose
affilo_aidmarketing1 yearStores the affiliate identifier to attribute conversions
affilo_clickmarketing30 daysRecords the referring click for attribution
_gaanalytics2 yearsAudience measurement

Third-party domains contacted (2)

  • affilo.com
  • affilo.jp
Questions

Frequently asked questions about Affilo

Can't find your question? Write to us, we answer fast.

What cookies does Affilo set?

Affilo typically stores session identifiers and, depending on configuration, analytics or marketing cookies. The exact names and lifetimes appear in the cookie table on this page, and you should scan your own site because deployments differ.

Do I need consent to use Affilo?

Yes. Affilo sets cookies or identifiers that are not strictly necessary, so under Article 5(3) ePrivacy you must obtain prior consent before it loads.

What is the legal basis for Affilo?

The non essential cookies rely on consent under Article 6(1)(a) GDPR combined with Article 5(3) ePrivacy. Strictly necessary processing can rely on contract under Article 6(1)(b) or legitimate interest under Article 6(1)(f).

Does Affilo transfer data to the United States or other third countries?

Affilo operates affiliate tracking across multiple regions and may process identifiers on servers outside the European Economic Area. Any such transfer needs Standard Contractual Clauses or an adequacy decision and a transfer impact assessment.

Do I need a DPIA for Affilo?

A DPIA is required when processing is likely to result in a high risk, for example large scale tracking or profiling. Where Affilo monitors behaviour at scale or combines data sources, run a DPIA before going live.

How do I implement Affilo in a compliant way?

Load Affilo only after consent through a consent management platform, keep it blocked by default, document each consent, list it in your records and cookie policy, and sign a data processing agreement with the vendor.

Are there alternatives to Affilo?

Yes. Depending on your goal you can choose privacy first or cookieless tools, or self hosted options that keep data in the EEA. Whichever you pick, the same consent and transparency duties apply.

How do I update my cookie policy for Affilo?

Add Affilo to the cookie policy with its purpose, the cookies it sets, their duration and the recipient, note any third country transfer and the safeguard used, and refresh the entry whenever you change configuration or after a new cookie scan.

Kochava

Kochava is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Kochava provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Kochava helps deliver the right message to the right audience at the right time.

Marketing

Fixel

Fixel is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Fixel integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Fixel makes advanced AI accessible to all teams.

Marketing

Facebook SDK

Facebook SDK is a development framework and toolkit providing developers with a structured foundation for building modern web applications. It offers reusable components, standardized architecture patterns, and comprehensive documentation. Facebook SDK accelerates development through code generation, testing utilities, and build optimization. With an active community and extensive ecosystem, Facebook SDK enables teams to build scalable, maintainable applications following industry best practices.

Marketing

Nativo

Nativo is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Nativo enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Nativo empowers marketing teams to achieve measurable growth.

Marketing

Concert

Concert is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Concert enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Concert empowers marketing teams to achieve measurable growth.

Marketing

Stay22

Stay22 is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Stay22 provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Stay22 helps deliver the right message to the right audience at the right time.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.