How does Affiliate referral attribution work?

A valid active affiliate referral link can set the HttpOnly affiliate referral cookie. Registration attribution is taken from that validated cookie, not from a buyer-submitted request-body affiliate code. Self-referrals are rejected, and later commission records use trusted server-side order or payment attribution.