FAQ

Do affiliates need a password?

No. Affiliates sign in via a magic link sent to their email. There is no password to create, remember, or reset.

Why is my commission in basis points?

It is not shown that way in the dashboard. You set a plain percentage when creating a campaign. Attribloom stores it precisely internally, but you only ever see and enter a percentage.

How much does Attribloom cost, and who gets the commission?

You set the commission rate when you create a campaign. AI affiliates earn that same rate, and their commission is what Attribloom keeps. Human affiliates keep everything they earn, and Attribloom takes nothing from their commissions. The AI affiliate commission applies to eligible attributed conversions, including paid iOS renewals within the three-month renewal window. Trials do not earn commission, and refunds or revocations reverse commission already credited.

What currencies are supported?

A curated set of real ISO 4217 currencies. When creating a campaign, pick the currency your sales actually settle in. Balances are held per currency, so it must match your settlement currency for payouts to reconcile correctly.

Why didn't a sale attribute?

A few common causes:

• Web: the click was not recorded before the postback arrived, or the postback signature was incorrect. Check that your server is signing the postback with the correct Postback secret and that the affiliate code or click ID is included.
• iOS, direct StoreKit 2: the appAccountToken was not set on the purchase request at purchase time. The token must be set before the purchase completes. It cannot be added after.
• iOS, RevenueCat: the affiliate referral code was not set in the configured subscriber attribute before the first purchase, the signed webhook is not connected to the correct iOS app, or RevenueCat did not provide the tax and store-commission fields needed to calculate developer proceeds safely.
• Environment mismatch: Sandbox/TestFlight purchases only attribute in Sandbox mode; Production purchases only attribute in Production mode. Sandbox purchases are never billed and never pay commission.
• Bundle ID mismatch: the bundle ID registered in Attribloom must exactly match the one Apple sends in the App Store Server Notification.

Is two-factor authentication required?

No. Two-factor authentication is optional and is off by default. You can enable it in Settings.

How do I use an http:// (non-secure) website as my destination?

When you create a campaign, just type the full address starting with `http://` in the Destination link field. For example, `http://legacy.example.com`. Attribloom only adds `https://` for you when you leave the scheme off; if you type `http://` yourself, that exact scheme is kept and your links will point to the http site. We default to `https://` and recommend it because http connections aren't encrypted, but http is supported when you specifically need it (for example an older site that doesn't offer https yet). Note that the domain must still be a public web address. Internal or private addresses are blocked for security.

Why did I get an error creating a campaign? (error codes)

Each campaign error includes a short code so you can ask about it here. What each means and how to fix it:

• CAMPAIGN_NAME_REQUIRED: The campaign name is empty. Enter any name (1–255 characters); it's just a private label for you.
• DESTINATION_URL_INVALID: The destination link couldn't be read as a web address. Enter a domain like `yourstore.com/product` (we add `https://` automatically), or paste a full `https://` URL.
• COMMISSION_RATE_OUT_OF_RANGE: The commission rate must be a percentage between 0.1 and 100. Values like 0 or 999 are rejected.
• CURRENCY_UNSUPPORTED: The payout currency isn't one we support. Choose one from the dropdown; it should match the currency your sales settle in.
• SSRF_BLOCKED: The destination resolves to a private or non-public address (for example `localhost` or an internal IP). For security, links can only point to public web addresses on your own domain. Use a normal public URL.
• CAMPAIGN_DESTINATION_REJECTED: The destination link was refused for another reason. Confirm it's a public web address and try again.
• SURFACE_CREATE_FAILED / COMMISSION_RULE_CREATE_FAILED / CAMPAIGN_CREATE_FAILED: A temporary problem on our side while setting up the campaign. Wait a moment and try again; if it persists, contact support.

What is the difference between Sandbox and Production for iOS apps?

Sandbox covers TestFlight builds and Xcode test purchases. These purchases are never billed to a real card and never generate commission. They exist only for integration testing. Production covers live App Store builds purchased by real users. Both environments generate App Store Server Notifications, but they are delivered to separate endpoints; Attribloom routes them based on the environment you selected when connecting the app.

Can I edit a campaign after creating it?

No. Campaigns are create-only today, so the commission rate and redeemer offer code cannot be edited after creation. Create a new campaign if the terms need to change, then use the new campaign's affiliate links.

What does the referred user see when they tap an affiliate link?

For an App Store campaign, the link shows an interstitial with a Continue to the App Store button. Tapping it copies the signed click token used for attribution, then opens the App Store.

How does the referred user get their discount?

If the campaign has a redeemer offer code, the iOS bind endpoint returns that App Store Connect offer code with the appAccountToken. The app can present the offer at its paywall so the referred user can redeem the configured discount.

Why doesn't the deferred IP match always work?

The link click and first app launch can leave through different network addresses. Switching between WiFi and cellular, or an IPv4 and IPv6 split, can prevent the match. The Continue to the App Store clipboard handoff is the deterministic, preferred path. A referral code the user enters is the final backstop.