> Partnerize and the GDPR: affiliate tracking cookies, consent requirements, legal basis and US data transfers for European publishers and merchants. > > Canonical: https://www.flowconsent.com/en/services/advertising/partnerize Advertising # Partnerize Marketing · [Official website](https://prf.hn) Partnerize is a UK-based partnership and affiliate marketing platform that enables brands to manage, track and optimise affiliate and influencer partnerships. It tracks conversions through click redirects via prf.hn and partnerize.com domains, sets tracking cookies, and may use device fingerprinting. Because Partnerize is used for marketing purposes and involves non-essential cookie storage, prior explicit consent is mandatory under the ePrivacy Directive and GDPR. Data is transferred to global infrastructure including the US, requiring SCCs or DPF as a safeguard. [Block Partnerize until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=advertising) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Advertising](https://www.flowconsent.com/en/services/advertising) - Consent Marketing - Prior consent Required - Documented cookies 3 - Third-party domains 2 - Servers United Kingdom, United States, global Overview ## What does Partnerize do? ## **What is Partnerize?** Partnerize is a UK-founded partnership and affiliate marketing platform that helps brands recruit, manage, track and pay affiliate partners, influencers and content publishers. When a user clicks an affiliate link, the click is redirected through Partnerize's prf.hn domain (a URL shortener and redirect service), which records the referral event before sending the user on to the merchant's website. On the merchant's confirmation or conversion page, a Partnerize tracking tag fires to record the conversion and attribute it to the correct partner. Partnerize also provides analytics and reporting to help brands optimise their affiliate programme. ## **How Partnerize tracks users: cookies and fingerprinting** Partnerize's primary tracking mechanism is a cookie set on the user's browser when they click an affiliate link through the prf.hn redirect. This cookie stores a click ID that is later matched to a conversion event on the merchant's site. Partnerize may also employ device fingerprinting techniques to track conversions in cookieless environments (e.g. Safari ITP or Firefox ETP), collecting browser and device attributes such as screen resolution, installed fonts, user-agent string and IP address to generate a probabilistic user identifier. Both cookie-based tracking and fingerprinting fall squarely within the scope of the ePrivacy Directive and require prior consent. ## **GDPR and ePrivacy obligations** Partnerize is a marketing and tracking service, not a service the user has explicitly requested. Under Art. 5(3) of the ePrivacy Directive, prior informed consent is required before any non-essential tracking cookie or fingerprinting mechanism is activated. Under the GDPR, the legal basis is Consent (Art. 6(1)(a)). This means Partnerize tracking must be blocked by default and may only fire after the user has actively consented via a compliant CMP. Legitimate Interests cannot justify cross-site affiliate tracking for EU users: the European Data Protection Board and multiple national DPAs have confirmed that tracking for advertising purposes requires consent. ## **Data transfers: UK and US processing** Partnerize's operations span the UK and global (including US) infrastructure. The UK benefits from an EU adequacy decision, so data transferred to Partnerize's UK infrastructure is covered. For US and other third-country transfers, Partnerize relies on Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework (DPF). Website operators should obtain and retain a copy of Partnerize's DPA, verify the current transfer mechanism in effect, and disclose the data transfers in their privacy notices with reference to the applicable safeguards. ## **DPIA and risk considerations** If Partnerize is used at significant scale, potentially tracking millions of users across multiple websites and combining cookie and fingerprint data, a DPIA may be required under Art. 35 GDPR. The cross-site profiling element and the use of fingerprinting in particular should be assessed in the DPIA. If your supervisory authority has published a list of processing activities requiring a mandatory DPIA, cross-site advertising tracking is likely included. Document your assessment in your Art. 30 records even if you conclude a full DPIA is not mandatory. ## **Practical implementation guidance** Configure your CMP to categorise Partnerize under marketing or advertising cookies and block it until consent is received. Add Partnerize and the prf.hn domain to your cookie notice with a clear description of affiliate tracking. Sign the DPA with Partnerize and document the transfer mechanism. Implement a conversion tracking fallback that does not use cookies or fingerprinting (e.g. server-side conversion posting with hashed order IDs) so that non-consenting users can still contribute to your affiliate reporting in an aggregated, non-personal way. Review your CMP category configuration and Partnerize DPA annually. Compliance ## Partnerize and the GDPR Partnerize is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR; ePrivacy Directive Art. 5(3)) - Risk level high - Applicable regulations GDPR, UK GDPR, ePrivacy Directive, national cookie laws ### Impact assessment (DPIA) A DPIA should be considered if Partnerize is used at scale to track and profile large numbers of users across multiple sites, particularly where fingerprinting techniques are employed in addition to cookies. The combination of cross-site affiliate tracking and potential device fingerprinting raises profiling concerns. Document the processing in your Art. 30 records. Ensure your DPA with Partnerize addresses the transfer of personal data to the US and the applicable safeguards (SCCs or DPF). Consider whether the fingerprinting element, if present, constitutes high-risk processing requiring a DPIA under your supervisory authority's list. ### Sample text for your banner > We use Partnerize, an affiliate marketing tracking service, to track referrals from our partners and measure conversions. This involves setting cookies on your device and sharing your visit data with Partnerize (UK/US). We will only activate Partnerize tracking with your consent. \[Accept marketing cookies] \[Decline] Cookies and trackers ## What Partnerize sets and contacts - Tracking method Click-redirect tracking, cookies, device fingerprinting, affiliate tracking pixels - Server location United Kingdom, United States, global - Data transferred outside the EU Data processed in the UK and US/global infrastructure. UK has EU adequacy; US transfers require SCCs or EU-US Data Privacy Framework (DPF). Partnerize is a UK-founded company. ### Cookies set (3) | Name | Type | Duration | Purpose | | -------------------------- | ---------- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Affiliate click ID cookie | persistent | 30 to 90 days | Stores the unique click identifier set when a user follows an affiliate link via prf.hn. Used by Partnerize to attribute purchases or conversions to the correct affiliate partner for commission payment. | | Conversion tracking cookie | persistent | 30 to 90 days | Set on the merchant's confirmation page to record conversion events (purchases, sign-ups) and match them to the originating affiliate click ID for reporting and partner remuneration. | | Partnerize session cookie | session | Session | Maintains the affiliate tracking session state during the user's journey from affiliate click to conversion, ensuring click ID integrity. | ### Third-party domains contacted (2) - `prf.hn` - `partnerize.com` Questions ## Frequently asked questions about Partnerize Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Partnerize set? Partnerize primarily sets a persistent tracking cookie when a user clicks an affiliate link that redirects through prf.hn. This cookie stores a unique click identifier used to attribute a subsequent purchase or conversion to the referring affiliate partner. Partnerize may also read or set cookies on the merchant's site to confirm conversion events. In browsers where cookies are blocked (e.g. Safari with ITP), Partnerize may fall back to device fingerprinting techniques. Cookie lifetimes vary; a typical affiliate tracking cookie persists for 30 to 90 days to cover deferred conversions. Always run a live cookie scan on your checkout flow to identify the exact current cookies. ### Is consent required to use Partnerize? Yes. Consent is mandatory. Partnerize is an affiliate marketing tracking service that stores tracking cookies and may perform device fingerprinting for purposes that are not strictly necessary for any service the user has requested. Under Art. 5(3) of the ePrivacy Directive, prior explicit consent must be obtained before any such tracking begins. Partnerize must be blocked by your CMP until the user actively accepts marketing or advertising cookies. Consent must be granular, informed and freely given, meaning a cookie wall or bundled consent does not satisfy the standard. ### What is the legal basis for Partnerize tracking? The legal basis is Consent (Art. 6(1)(a) GDPR). Affiliate tracking is a marketing activity and does not meet the threshold for the strictly-necessary exemption. Neither Legitimate Interests (Art. 6(1)(f)) nor Contract (Art. 6(1)(b)) can justify Partnerize tracking for EU users. The EDPB and multiple national DPAs have confirmed that tracking for advertising and affiliate purposes requires opt-in consent. Consent records must be retained, and withdrawal of consent must be as easy as giving it. ### Does Partnerize transfer data to the US or other third countries? Yes. Partnerize operates across the UK (adequacy decision) and global infrastructure including the US. US transfers require Standard Contractual Clauses (SCCs) or rely on the EU-US Data Privacy Framework (DPF). You should obtain Partnerize's Data Processing Agreement (DPA), confirm the transfer mechanism in place, and disclose this in your privacy notice. State specifically that user data may be transferred to the US and identify the applicable safeguard. ### Do I need a DPIA for Partnerize? A DPIA should be considered if you use Partnerize at scale or if Partnerize employs device fingerprinting in addition to cookies. Cross-site affiliate tracking that creates profiles of individuals' purchasing behaviour across websites is a form of systematic profiling. Many EU supervisory authorities include cross-site advertising tracking on their mandatory DPIA lists. Conduct a DPIA if your use case involves tracking large numbers of EU users or if fingerprinting is confirmed to be active. Document any assessment in your Art. 30 records. ### How do I implement Partnerize in a GDPR-compliant way? Configure your CMP to block Partnerize (including the prf.hn redirect and any on-page conversion tags) under the marketing/advertising category until the user consents. Update your cookie notice to name Partnerize, describe affiliate conversion tracking, state the cookie lifetime and note the UK/US data transfer. Sign Partnerize's DPA. For users who decline consent, implement a server-side conversion posting mechanism (where available) using hashed identifiers so that aggregate conversion data can still be reported without individual tracking. Review your implementation whenever Partnerize updates its tracking technology. ### Are there GDPR-safer alternatives to Partnerize for affiliate tracking? Alternative affiliate platforms with a strong EU compliance posture include Awin (Germany, GDPR-first design, limited cookie window options), Tradedoubler (Sweden, EU-based), and Impact (US, with DPA and SCCs). All affiliate platforms that track conversions via cookies face the same ePrivacy consent requirement; the key differentiators are data storage location, DPA quality and whether server-side or cookieless tracking alternatives are available. Evaluate alternatives based on the availability of server-side tracking APIs and EU data residency options. ### How do I update my cookie policy to cover Partnerize? Your cookie notice should list Partnerize by name under the marketing or advertising category. Describe the purpose as affiliate conversion tracking. State that a tracking cookie is set when users click affiliate links via prf.hn. Include the typical cookie lifetime (e.g. 30 to 90 days). Name Partnerize as the third-party cookie controller. Disclose the transfer of data to the UK and US and reference the applicable safeguard (UK adequacy, SCCs or DPF). Review and update the cookie notice whenever Partnerize changes its cookie set or when DPA guidance changes. Same category ## More services: Advertising [See the whole category](https://www.flowconsent.com/en/services/advertising) ### [Excel Impact](https://www.flowconsent.com/en/services/advertising/excel-impact) [Excel Impact is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Excel Impact provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Excel Impact helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/excel-impact) [Marketing](https://www.flowconsent.com/en/services/advertising/excel-impact) · ### [Kwanzoo](https://www.flowconsent.com/en/services/advertising/kwanzoo) [Kwanzoo is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Kwanzoo provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Kwanzoo helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/kwanzoo) [Marketing](https://www.flowconsent.com/en/services/advertising/kwanzoo) · ### [Mediavine](https://www.flowconsent.com/en/services/advertising/mediavine) [Mediavine is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Mediavine provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Mediavine helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/mediavine) [Marketing](https://www.flowconsent.com/en/services/advertising/mediavine) · ### [Interago](https://www.flowconsent.com/en/services/advertising/interago) [Interago is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Interago enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Interago empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/interago) [Marketing](https://www.flowconsent.com/en/services/advertising/interago) · ### [ValueCommerce](https://www.flowconsent.com/en/services/advertising/valuecommerce) [ValueCommerce is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. ValueCommerce integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, ValueCommerce helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/advertising/valuecommerce) [Marketing](https://www.flowconsent.com/en/services/advertising/valuecommerce) · ### [Peachs](https://www.flowconsent.com/en/services/advertising/peachs) [Peachs is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Peachs integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Peachs helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/advertising/peachs) [Marketing](https://www.flowconsent.com/en/services/advertising/peachs) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)