How to test if a SaaS program actually tracks you in a cookieless world

How to test if a SaaS program actually tracks you in a cookieless world

Everyone says "we track everything." Make them prove it before you send traffic. The test:

— Ask their cookie window AND fallback. Safari ITP caps first-party cookies at 7 days; Firefox blocks third-party outright.
— Ask if they pass a click ID server-side or rely purely on browser cookies.
— Run your own click, clear cookies, sign up, wait 8 days, check if it attributes.
— Sign up from a fresh device on mobile Safari specifically. That's where attribution dies.
— Ask what happens on a self-serve signup where the user pastes the URL without your param.

If they only have a 30-day cookie and no server-side ID, a large share of your real conversions vanish silently.

Verdict: "30-day cookie" in 2025 means "we lose your iOS traffic."