Root Domains - A root domain such as example.com can be used as the custom domain with a DNS provider that supports CNAME flattening or ALIAS records, verified by a TXT record that must stay in place (#17242)
Captcha
Invisible reCAPTCHA - A new "Key type" setting in Configuration > Captcha supports Google reCAPTCHA v2 Invisible keys, which show Google's badge instead of the checkbox on the affiliate signup, account signup and request new password forms and run the check on submit (#17467)
Recurring Commissions
Recurring Commissions Validity - The new "Recurring commissions validity" setting, set per commission group, declines recurring commissions whose initial sale is older than the given number of days; it also applies to existing recurring rules (#17419)
Affiliate Signup
Unique Notification Email - A new option on the notification email signup field rejects a username or notification email already used by another affiliate or merchant (#17437)
MCP
Hourly, Daily and Monthly Reports - The new hourly_report, daily_report and monthly_report MCP tools return the reports by hour, day or month, with metric, affiliate, campaign, status and time offset filters (#17402)
Improvements
Affiliates
Campaigns Tab - The "Commission groups" tab in the affiliate details is renamed to "Campaigns" and is shown also without the Commission Groups feature (#17397)
User Interface
Video Tutorials - Video Tutorials in the merchant panel are shown as a grid of video cards, and the merchant and affiliate panels have the new 2026 Control Panel Tour videos (#17481) (#17468)
Bug Fixes
Captcha and Signup Theme
reCAPTCHA Theme - The reCAPTCHA "Theme" setting works again, with a new default "Auto" that follows the light or dark color scheme of the signup page (#16501)
Trace Theme - Fixed captcha spacing and the error notification style on Trace signup and login forms, and the reCAPTCHA overflowing the signup form next to custom fields (#16485) (#17464)
REST API v3 and MCP
Stats Reports - Money sums in the hourly, daily and monthly reports no longer show rounding noise, and only errors in q are labelled "Invalid search query" on all list endpoints (#17459)
Affiliate Custom Fields in MCP - get_affiliate, create_affiliate and update_affiliate return only custom fields defined in the signup form (#17204)
Email Templates
Load Default Template - Load default template works for all email templates, and saving in HTML mode keeps the secret tags (#17453)
Commissions
Negative Carryover - Carryover commissions are no longer declined by fraud protection (#17428)
Affiliate Panel
Theme Settings - Theme settings load when all built-in affiliate themes are disabled (#17439)
Deeplink Age Texts - The "Created … ago" texts in the Deeplink generator can be translated (#17430)
Export in Background - The Export dialog closes once the export starts, and a notification in the merchant and affiliate panel shows its progress with the estimated time left, stays after a browser reload and offers "Download export" when the export finishes (#17321) (#17244)
REST API v3
Hourly, Daily and Monthly Reports - The new GET /reports/hourly, /reports/daily and /reports/monthly endpoints return the reports grouped by the time_offset you pass (#16426)
Improvements
AI Assistant
Ask AI Button - The AI assistant button in the merchant panel is now called "Ask AI", so it is no longer confused with the "AI assistants (MCP)" configuration, and its label is translated (#17414)
User Interface
Summer Theme by Default - Summer is the default merchant and affiliate panel theme, also for existing accounts that never picked a panel theme (#17411)
Tracking
Shorter IP Validity - New installations default to 2 hours for "IP address validity" and 6 hours for "UserAgent and IP address validity"; existing installations keep their values and can switch to these recommended ones (#17178)
REST API v3 and MCP
Rate Limits per API Key - Only authenticated requests count toward the rate limit, which is now 100 requests per minute per API key and 200 per minute per installation (#15537)
Write Access Hint - On a read-only connection the AI assistant learns which write tools are hidden and how to grant access to them (#17344)
Performance
Clicks Grid and Export - The Clicks grid and its CSV export load faster on large accounts (#17322)
Bug Fixes
Performance Rewards
Edit Rule Dialog - Editing a rule no longer leaves the If and Then lists empty (#17229)
Send Email to Affiliate - Rules on direct sub-affiliates' sales email the parent affiliate instead of the sub-affiliate (#17373)
Extra Bonus Email - The new extra bonus commission email goes to the affiliate who received the bonus (#17339)
API
Affiliate Clicks IDs - Affiliates can again get campaign, banner and channel IDs from the clicks grid through the PHP API, and the merchant controls them in the affiliate Clicks screen's Allow view (#17350)
Top Affiliates Default Columns - GET /reports/top-affiliates without fields returns a fixed default column set instead of following the merchant's saved panel view (#16909)
Clicks Paging - Paging through clicks with the API no longer misses older clicks (#17322)
Referrer in MCP Clicks - The search_clicks MCP tool returns referrer_url (#17215)
Email Notifications
Unsubscribe Link - Unsubscribing from affiliate email notifications through the email link writes an audit log entry, and fails for deleted affiliates (#17172)
Plugins
Prohibit Commission If Affiliate Is Purchaser - Transaction data fields 2–5 can be left empty again (#17405)
User Interface
Popup Position - Fixed position of the auto-refresh menu, hover texts, list box popups and tab overflow menus near screen edges and in right-to-left languages (#17093) (#17094) (#17095) (#17096)
List Box Focus - List boxes no longer reopen or take the focus back after an entry is picked (#17316)
Recently Created Deeplinks - The Deeplink generator saves every generated link with an optional title and lists them under "Your most recently created deeplinks", where affiliates can copy, rename or delete them (#14923)
CSV Import
Recent Imports - The Load template dialog lists your last five distinct import settings for transactions, affiliates, lifetime referrals and tracking requests, so a recent import can be repeated or saved as a template (#17240)
REST API v3
Affiliate Notification Settings - The new GET and PATCH /affiliates/{id}/notification-settings operations read and change an affiliate's email notification settings (#17076)
Improvements
REST API v3 and MCP
Original Currency of Transactions - Transaction endpoints and MCP transaction tools return original_currency, original_total_cost and exchange_rate for orders converted from another currency (#17211)
Tracking
Custom Fields in JavaScript Framework Forms - Values the tracking script writes into form fields are now submitted also from forms rendered by React, Vue and similar frameworks (#17283)
Integrations
Shopify Subscriptions - The ReCharge and Seal Subscriptions recurring options can no longer be saved while the Recurring commissions feature is inactive, and renewal orders arriving in that state raise a notification (#17245)
Last Page Cursor - List endpoints and MCP list tools no longer return a pagination cursor on the last page (#17212)
Sort by Type - GET /transactions sorted by type no longer fails when the fields list leaves out tier (#17270)
Affiliate Endpoints - GET /affiliate/transactions and GET /affiliate/campaigns return only the columns the affiliate grids allow, so they no longer return the undocumented affiliate_first_name, affiliate_last_name, affiliate_id and affiliate_status, or the campaign type, is_default and order (#15170)
AI Assistant in Audit Log - Audit log entries of MCP changes name the AI assistant that made them (#17213)
Recurring Commissions
Declined Affiliates under Save to Parent - Recurring commissions skip a declined affiliate and move the parent affiliates down a tier when "Save to parent" is set (#16892)
Tracking
Unknown Visitor ID - The tracking script no longer writes the text "null" into custom fields or stores it as the visitor cookie (#17285)
Login
Remember Me Expiration - The "Remember me" login extends its 14-day expiry on each visit, as announced in 5.15.8.6 (#17294)
Reports
Commission Stats Filter - Affiliate grids and reports load again with a filter on a commission-type stats column (#17269)
User Interface
Menu Position - Fixed position of the gadget, grid row and tab list menus near screen edges and in right-to-left languages (#17092)
Deeplink Generator Campaign Dropdown - The Campaign dropdown closes after picking a campaign on Affiliate Network accounts (#17312)
Copy Icon Alignment - Fixed copy icon alignment next to "Your General Affiliate Link" (#17310)
VAT Invoicing Fields in Signup Form - Affiliates can fill in their VAT invoicing details directly on the signup form when "Include VAT invoicing fields in signup form" is enabled in Configuration > Affiliate signup, optionally only for affiliates from selected countries (#16055)
REST API v3
Affiliate Signup Endpoint - The new POST /affiliates/signup operation registers an affiliate with the public signup behavior and recognizes the parent affiliate from the passed visitor_id or ip when no parent_id is given (#15762)
Improvements
Lifetime Commissions
Commission Group Loading per Affiliate - The "Load by lifetime referrer also commission group" option has a new "Apply to" affiliate picker to limit it to selected affiliates (#17167)
Affiliate Network
System-wide Settings Limited to the Main Account - Network merchants outside the main account no longer get payouts, system-wide configuration, the accounts manager, import and export or the event, audit and mail logs, whatever their role grants; the Roles screen lists these privileges in a separate "Main account only" section (#16530)
Payouts
Invoice Date Format by Language - Payout invoices use the date format of the affiliate's language unless the merchant set a custom date format in Regional settings (#14309)
Performance
Clicks List with Campaign Filter - The Clicks lists, their CSV export and the API v3 clicks endpoint no longer time out with a campaign filter and a past date range on large accounts (#17127)
Recurring Commission Rules Grid - The grid sorts by Last commission by default instead of Date created, which makes it load in a fraction of the time on large accounts (#17119)
Lifetime Referrals Grid - Filtering and paging by Date changed is faster on large accounts (#17175)
Faster Long-Running Tasks - Long imports, exports and payouts are processed faster (#17108)
Security
Security Improvements - Stricter ownership checks in the affiliate panel (#16903)
Bug Fixes
REST API v3 and MCP
Affiliate Responses - Create, update and single-affiliate responses, and MCP get_affiliate, include status, notification_email, overwrite_cookie, the parent's name and status and all detail fields, with null for empty values; campaign details report the account-wide overwrite cookie setting for campaigns on the default (#15831) (#17203)
Fractional Cookie Lifetime - Campaign endpoints and MCP campaign tools return cookie_lifetime with its fraction instead of a whole number (#17206)
Pagination Cursor Validation - List endpoints return 400 when only one of last_id and last_value is sent (#16895)
MCP Search Defaults - search_affiliates and search_transactions return the newest records first by default, and the non-existent "suspended" status filter was removed from search_affiliates (#17199) (#17198)
Documentation Examples - The q filter examples in the API v3 documentation use IDs that exist on a fresh install (#16911)
MCP Authorization Checkbox - The "Make changes" checkbox on the Authorize application screen toggles when clicked in the Summer and Bootstrap themes (#17174)
Signup Forms
Payout Options in Generated Form Code - The generated HTML, PHP and JSON signup form code contains the payout options again (#17121)
Mandatory Checkboxes and Radio Buttons - Unchecked mandatory checkboxes are highlighted in the Trace signup theme, and mandatory radio button groups are validated (#17163)
Commissions
Coupon Codes in Commission Import - On a network, the import resolves a coupon code within the account of the row's campaign, so codes used in several merchant accounts no longer skip the row (#17087)
Tracking
Generated ID Collisions - Collisions of freshly generated IDs are retried again instead of losing the click and raising an "Unable to save raw click" critical notification (#17164)
Audit Log
Recurring Commission Rule Changes - Edits of a recurring commission rule are logged with the changed commission type, affiliate and campaign, status changes log the real previous status, and the event is named "Recurring commission rule changed" (#17131)
Affiliate Panel
Lifetime Referrals Screen - The screen no longer fails when the Lifetime Commissions plugin is inactive (#17200)
User Interface
Grid Footer Totals - Fixed "contains invalid characters" error on the Transactions grid when a footer total netted to zero (#17129)
Email Table Headers in Dark Mode - Table headers in report emails, the pay day reminder list and the split commission sale summary are readable in dark mode (#17166)
Tooltip Position in RTL Languages - Help tooltips open on the correct side in right-to-left languages (#16475)
Exclude Network Accounts in Pay Affiliates - The Pay affiliates advanced search has a new Exclude commissions box with options to leave out commissions from suspended network accounts and from network accounts with a negative balance (#16908)
Improvements
User Interface
Import Progress - The CSV import notification shows a progress bar, the total row count, the percentage and an estimate of the remaining time, and long file names wrap instead of being clipped (#17065) (#17073)
Wider Help Tooltips - Help tooltips with long text are no longer squeezed into a narrow column on wide screens and are no longer cut off at the edge of the form (#16474)
Performance
Faster Background Tasks - Cron runs keep processing other waiting tasks for the whole time slot instead of ending early, so imports and other long tasks finish noticeably faster on busy accounts (#17058)
Lighter Tracking Requests - Accounts with high page traffic, especially those using the "Affiliate info in external page" plugin, no longer write to the database on nearly every page view, as visit processing is now triggered at most once per minute (#17060)
Security
Security Improvements - Improved input sanitization on replicated sites and stricter server-side enforcement of merchant role permissions (#16601) (#16896) (#15169)
Bug Fixes
Commissions
Commissions of Declined Affiliates - The "What to do with commissions of declined affiliate?" setting now applies to the whole multi-tier chain: Do not save no longer pays parent affiliates for sales through a declined affiliate, Save as declined stores the parents' commissions as declined too, and Save to parent moves the parent affiliates up a tier also for merchant-added commissions, direct links and clicks. The setting also got a help text explaining each option (#16619)
Logins History
Logins History Search - Fixed "Unable to load data" when searching in a view without the Role column (#17040)
