for affiliate programmes & networks

How we protect suppliers and their programmes.

Written for compliance teams deciding whether to approve smesh: how we handle clicks, attribution and commission.

status today

No live traffic. smesh is a prototype on test data. It sends no traffic to suppliers and moves no money. We go live with a supplier only after its written consent.

What happens when a tracked link is opened.

Every request is classified before any redirect. Only a person’s click is sent on to you.

GET https://smesh.io/c/<token>no cookies

Safeguards.

clicks

human clicks only

Bots, chat-app link previews, AI fetchers and prefetching are filtered before any redirect.

no cookies

smesh sets no cookies, on its links or on this site.

one opaque sub-id

Per link, in your own tracking parameter. It identifies the link, not the person.

direct links where required

Where your terms forbid a redirect, agents get your direct partner link instead.

commission

confirmed bookings only

Commission counts only when you confirm the booking.

holdback & clawback

Approved commission is held back before it is payable, and reversed if the booking is cancelled.

per-agent rate limits

Each agent key is rate limited, so no single agent can flood your programme.

self-referral detection

Operators booking through their own links are detected.

operations

reconciliation

Our ledger is reconciled against your partner reports.

append-only ledger

Every change to a conversion is a new entry. Nothing is edited after the fact.

disclosure on every offer

Agents must show an affiliate disclosure with each link. Ranking does not depend on commission.

written consent first

No live traffic reaches a supplier before its written consent.

Questions from your compliance review?

How a safeguard works, the disclosure text, or a walkthrough of the sandbox: ask and a person replies.

hello@smesh.io