> How Skimlinks rewrites affiliate links, which cookies it sets, why consent is required under GDPR and ePrivacy, and how to handle its US data transfers. > > Canonical: https://www.flowconsent.com/en/services/advertising/skimlinks Advertising # Skimlinks Marketing · [Official website](https://skimlinks.com) Skimlinks, owned by Taboola and Connexity, is a US based affiliate monetization service that automatically rewrites outbound merchant links and tracks clicks and conversions. It sets attribution cookies and shares data with merchant and affiliate networks, which makes it a high risk third party that transfers personal data to the United States. Consent is required before its tracking loads, and operators should document the legal basis and transfer safeguards. [Block Skimlinks until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=advertising) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Advertising](https://www.flowconsent.com/en/services/advertising) - Consent Marketing - Prior consent Required - Documented cookies 6 - Third-party domains 6 - Servers United States, with global distribution Overview ## What does Skimlinks do? ## **What Skimlinks is** Skimlinks is a US based affiliate monetization service owned by Taboola and Connexity that helps publishers earn commission from outbound links to merchants. It works across publisher sites through its own domains, including skimlinks.com, skimresources.com, redirectingat.com and go.skimresources.com. For the operator it is a high impact third party because it actively rewrites links and tracks user behaviour across the outbound journey rather than just measuring page views. ## **How it works** Skimlinks loads a script that scans the page for outbound merchant links and automatically rewrites them so that clicks pass through its redirect infrastructure. When a user clicks, the service records the click, attributes any resulting purchase, and shares the relevant data with merchant and affiliate networks so commission can be paid. This means the service performs heavy third party tracking and routes user interactions through US based systems. ## **What data and cookies it collects** Skimlinks typically sets attribution and tracking cookies and processes data such as the links clicked, referring pages, device and browser signals, and conversion events. This information can build a picture of a user across publishers and merchants for the purpose of commission attribution. Operators should review the exact cookies in their own deployment, since the precise set can change over time and by configuration. ## **GDPR and ePrivacy implications** Skimlinks sets non essential marketing cookies and engages in cross context behavioural tracking, so it falls squarely within the GDPR and the ePrivacy Directive. Under ePrivacy the tracking cookies may only be set after consent, and under the GDPR the sharing of personal data with affiliate networks needs a valid legal basis and transparency. Because the data flows to the US and to multiple partners, the risk profile is high and the accountability obligations are significant. ## **Consent requirements and data transfers** Consent must be collected through a consent management platform before the Skimlinks script runs, and the link rewriting and tracking should be blocked until the user accepts marketing cookies. Data is transferred to the United States, so operators should rely on standard contractual clauses or another valid transfer mechanism and reflect this in their privacy notice. The sharing with affiliate networks worldwide should also be disclosed clearly. ## **Practical compliance steps** To use Skimlinks compliantly, block the script by default and load it only after marketing consent, then stop it and clear its cookies when consent is withdrawn. Document the legal basis, complete a DPIA given the tracking and transfers, and put the appropriate data processing and transfer terms in place. List Skimlinks and its domains in your cookie policy and be transparent that outbound links may be monetized and tracked. Compliance ## Skimlinks and the GDPR Skimlinks is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) for the affiliate tracking and attribution cookies and the associated data sharing. - Risk level high - Applicable regulations GDPR, ePrivacy Directive (Cookie Law), UK GDPR ### Impact assessment (DPIA) Because Skimlinks involves systematic tracking of outbound clicks, profiling for monetization, and transfers to the US, a DPIA is strongly advisable. Assess the scale of click and conversion tracking, the sharing with affiliate networks, and the third country transfer risk, and document safeguards such as consent gating, standard contractual clauses, and data minimization. ### Sample text for your banner > We use Skimlinks to monetize outbound links to merchants. This rewrites some links and sets cookies that track clicks and conversions, and it may share data with affiliate networks in the United States. With your consent, Skimlinks tracking will be activated. Cookies and trackers ## What Skimlinks sets and contacts - Tracking method Automatic outbound link rewriting, click and conversion tracking, and attribution cookies - Server location United States, with global distribution - Data transferred outside the EU Data is transferred to the United States, where Skimlinks and its parent Taboola and Connexity operate. Click and conversion data is also shared with merchant and affiliate networks that may be located worldwide. Transfers require appropriate safeguards such as standard contractual clauses. ### Cookies set (6) | Name | Type | Duration | Purpose | | ------------------- | ---------- | ---------- | ------------------------------------------------------------------------------------------------------- | | skim\_session | Marketing | Session | Identifies the visitor session to associate clicks on affiliate links with a single browsing session | | \_\_cf\_bm | Functional | 30 minutes | Bot management cookie used by the Skimlinks infrastructure to distinguish humans from automated traffic | | skimlinks\_referrer | Marketing | 1 year | Stores the referring publisher so that affiliate commissions can be attributed correctly | | redirectingat | Marketing | 1 year | Set during click redirects to track outbound clicks to merchant sites for sale attribution | | taboola\_tracking | Marketing | 13 months | Used by the Taboola and Connexity group to link affiliate activity to advertising attribution | | skim\_uid | Marketing | 1 year | Persistent identifier that recognizes a device across visits to attribute conversions to clicks | ### Third-party domains contacted (6) - `skimresources.com` - `go.skimresources.com` - `redirectingat.com` - `skimlinks.com` - `r.skimresources.com` - `taboola.com` Questions ## Frequently asked questions about Skimlinks Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Skimlinks set? Skimlinks typically sets attribution and tracking cookies that identify a visitor and link an outbound click to a later purchase. They are third party and persistent, often lasting around a year, and are not strictly necessary. Confirm the exact cookies in your deployment, since the set can change over time. ### Is consent required to use Skimlinks? Yes, consent is required before Skimlinks loads because it sets non essential tracking cookies and rewrites links for monetization. The script should be blocked until the visitor accepts marketing cookies. Loading it without consent would breach the ePrivacy cookie rules. ### What is the legal basis for processing? The applicable legal basis is consent under Article 6(1)(a) GDPR for the tracking cookies and the related data sharing. Legitimate interest is generally not appropriate here given the cross context tracking and the transfers involved. Record the consent based legal basis in your records of processing. ### Does Skimlinks transfer data to the US? Yes, Skimlinks is US based and transfers personal data to the United States, and it also shares click and conversion data with affiliate networks that can be located worldwide. You should put standard contractual clauses or another valid transfer mechanism in place. Disclose these transfers clearly in your privacy notice. ### Do I need a DPIA for Skimlinks? A DPIA is strongly advisable because Skimlinks involves systematic tracking of outbound clicks, profiling for monetization, and third country transfers. Assess the scale of tracking, the sharing with affiliate networks, and the US transfer risk. Document mitigations such as consent gating and data minimization. ### How do I implement Skimlinks compliantly? Block the Skimlinks script by default and load it only after the visitor accepts marketing cookies, then stop it and clear its cookies on withdrawal. Put data processing and transfer terms in place, complete a DPIA, and be transparent that outbound links may be rewritten and tracked. List the service and its domains in your cookie policy. ### Are there alternatives to Skimlinks? Direct affiliate networks and other monetization tools exist, but most affiliate tracking relies on similar cookies and transfers, so the compliance duties are comparable. Some setups let you keep data within the EU or reduce the cookie footprint. Evaluate alternatives on data location, transparency, and contractual terms. ### How do I update my cookie policy for Skimlinks? Add Skimlinks as a named third party, describe its tracking and attribution cookies, and state that outbound links may be monetized. Reference its domains such as skimlinks.com and redirectingat.com and disclose the US transfers and affiliate network sharing. Review the entry whenever the cookies or partners change. Same category ## More services: Advertising [See the whole category](https://www.flowconsent.com/en/services/advertising) ### [MGID](https://www.flowconsent.com/en/services/advertising/mgid) [MGID is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. MGID provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, MGID helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/mgid) [Marketing](https://www.flowconsent.com/en/services/advertising/mgid) · ### [Luna](https://www.flowconsent.com/en/services/advertising/luna) [Luna is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Luna enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Luna empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/luna) [Marketing](https://www.flowconsent.com/en/services/advertising/luna) · ### [Lead Concept](https://www.flowconsent.com/en/services/advertising/lead-concept) [Lead Concept is a lead generation platform designed to help businesses capture, qualify, and convert website visitors into sales-ready leads. It offers smart forms, interactive content, and behavioral tracking to identify high-intent prospects. Lead Concept integrates with CRM and marketing automation tools to streamline lead nurturing. With scoring models and analytics, Lead Concept helps teams focus on the most promising opportunities, improving pipeline quality and revenue growth.](https://www.flowconsent.com/en/services/advertising/lead-concept) [Marketing](https://www.flowconsent.com/en/services/advertising/lead-concept) · ### [ArcSpan](https://www.flowconsent.com/en/services/advertising/arcspan) [ArcSpan is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. ArcSpan enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, ArcSpan empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/arcspan) [Marketing](https://www.flowconsent.com/en/services/advertising/arcspan) · ### [Lead Prosper](https://www.flowconsent.com/en/services/advertising/lead-prosper) [Lead Prosper is a lead generation platform designed to help businesses capture, qualify, and convert website visitors into sales-ready leads. It offers smart forms, interactive content, and behavioral tracking to identify high-intent prospects. Lead Prosper integrates with CRM and marketing automation tools to streamline lead nurturing. With scoring models and analytics, Lead Prosper helps teams focus on the most promising opportunities, improving pipeline quality and revenue growth.](https://www.flowconsent.com/en/services/advertising/lead-prosper) [Marketing](https://www.flowconsent.com/en/services/advertising/lead-prosper) · ### [Stay22](https://www.flowconsent.com/en/services/advertising/stay22) [Stay22 is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Stay22 provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Stay22 helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/stay22) [Marketing](https://www.flowconsent.com/en/services/advertising/stay22) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)