Partner postbacks and affiliate networks

You can track Andalu sales through Awin, Impact and CJ, or through your own tracker. We keep each network's click id with the click, and send a signed server-to-server postback each time a sale moves on: once the buyer's payment is taken, once its hold ends, and if it is reversed. Each postback carries a signature you check with your secret.

Set up a postback

  1. 1

    In your hub, open Settings and enter your Postback URL.

  2. 2

    Copy your postback secret. It is shown once, so keep it safe.

  3. 3

    Select Send a test, and check your tracker received it.

Verify a postback

  1. 1

    Read the Andalu-Signature header. It holds a time, t, and a signature, v1.

  2. 2

    Join the time, a dot and the raw request body, and sign that with your secret using HMAC-SHA256.

  3. 3

    Compare your result with v1. If they differ, or the time is more than a few minutes old, ignore the call.

Frequently asked questions

Still stuck?

A person replies by email.

Contact support