The short answer

An S2S postback is a notification sent between servers to report a conversion event. A useful test follows a click identifier into the affiliate network and then checks the identifier returned with the conversion. Receiving a request is only one step: the expected event must appear in the correct report, with the intended status and without an unintended duplicate.

Editorial illustration of data moving from a click through a campaign to a conversion notification.

Decide what the test needs to prove

Before editing a URL, write down the question your test should answer. Are you checking that the network receives your click identifier, that your tracker accepts an event, or that the agreed payout appears correctly? These checks are connected, but they are not interchangeable. Treating them as a single check makes troubleshooting harder. A reachable landing page does not prove that conversion reporting works, and a visible test event does not prove that every commercial validation rule has been configured correctly.

Prepare a short test brief containing the campaign, the permitted country, the tracker, the expected event and the person authorized to initiate the test. Include a stopping condition: if the destination, product or identifier differs from the brief, do not continue towards an order. Understand an upstream problem before adding another downstream event. This preparation also gives your manager enough context to reproduce the issue without asking you for the same missing details several times.

Preserve the right identifier in both directions

The tracker supplies an identifier for the click. The network receives that value in a designated parameter and returns it when the agreed event occurs. Voluum's documentation distinguishes its click ID from the receiving postback parameter. The parameter used by an affiliate network is not universal: follow the mapping documented for your integration rather than copying a different platform's example.

Create a small mapping table before launch: where the value originates, which macro supplies it, which input parameter receives it and which return field should contain it. Do not substitute your affiliate account ID for the click ID. One identifies a commercial relationship; the other identifies a particular visit. A placeholder still visible in braces after the step that should replace it is a warning sign. Keep field names in your test notes, but avoid posting complete personal links or sensitive values in a public support channel.

Choose a global configuration or a campaign exception

A global postback can simplify maintenance when several campaigns use the same tracker and data contract. Instead of editing each offer, you maintain a shared configuration. That convenience makes scope important: which events are sent, which statuses are included, and which programmes are covered? A setting described as global in one tool does not automatically apply to every conversion source in another system. Ask for an explicit description of what it covers and what it leaves out.

A campaign-specific configuration can help when an offer needs a different event, destination or field mapping. Before creating the exception, establish whether it replaces the global setting or adds another notification. Two notifications for one conversion can inflate a report when deduplication is not defined correctly. In Cash Nutra, start with the settings available in your account and ask your manager to confirm exceptions. Pasting a URL into a field is not proof that the configuration is approved, enabled or working.

Run a limited test and keep useful evidence

Use the supported testing mechanism in the tools involved and a campaign you are authorized to access. Record the time and time zone, the test reference and the steps performed. Your notes should distinguish opening the personal campaign link, reaching the expected destination, initiating the authorized test and checking its result. Do not use a real customer's contact details or create a paid purchase solely to investigate a technical parameter. Keep the exercise limited to what the agreed test procedure requires.

After sending the event, open the destination report and search by its reference rather than relying on an aggregate counter. Compare campaign, status and time, plus payout and currency when they are part of the agreed contract. Ask whether test events are excluded from commercial reporting. A tool may display a technical notification without treating it as a payable conversion. Retain a redacted screenshot and the references needed for investigation. Focused evidence is easier to act on than a large export containing unrelated information.

Separate delivery from successful attribution

A successful HTTP response describes an exchange with a server; it does not independently prove commercial attribution. Google documents a separate event-validation mechanism for its own Measurement Protocol. This illustrates why each integration's response contract needs to be checked rather than assuming that another tracker's codes and rules apply. For your setup, inspect both the returned response and the event actually recorded at the destination.

If the event is missing, start with straightforward explanations: the reporting time zone, a status filter, hidden test events or the wrong workspace. Next, check whether the supplied identifier belongs to a known click, whether the macro was replaced and whether the destination was correct. Avoid changing the incoming link, its parameters and the postback simultaneously. Change one element, then repeat the authorized check. Otherwise, even a positive result will not tell you which change solved the problem.

Handle duplicates and uncertain outcomes deliberately

A notification can be sent more than once, especially when a system does not know whether the first attempt succeeded. Agree on what identifies a unique event. A click and a transaction are not interchangeable: depending on the commercial model, multiple distinct events can belong to the same click. Clarify how status changes, cancellations and additional events are handled before deciding that every repeated notification should be discarded. A simple duplicate count can hide meaningful differences between those cases.

When a request times out or its response is lost, do not immediately send several identical tests. First inspect the destination logs and reports to determine whether the event already exists. If the evidence remains inconclusive, send the integration owner your test brief and explicitly describe delivery as uncertain. Missing confirmation is not proof of failure. A controlled retry preserves a useful timeline and reduces the risk that the troubleshooting process itself creates misleading records.

Move from a successful test to a monitored launch

A successful test validates a particular path and configuration, not every future campaign. Before expanding the launch, review variations that materially change the contract: country, event type, tracker, accepted status or a campaign-specific override. Cosmetic variations do not all require another test, but a new destination or conversion source deserves a targeted check. Record the configuration version so that, if reporting later changes, your team knows which modifications to investigate instead of rebuilding the entire setup from memory.

To prepare a Cash Nutra partnership, describe your traffic source, target markets and intended tracker in your account application. Once access is confirmed, obtain the campaign's personal link and configure the postback options available in your workspace. Your manager can review any remaining integration requirements. The objective is not a promise of conversions or profit. It is a measurement process you understand well enough to support acquisition decisions, with clear ownership when the results need investigation.

Before you launch

  • Define the expected event and status before starting the test.
  • Document the click macro, receiving parameter and return field.
  • Confirm how global settings interact with campaign-specific exceptions.
  • Use an authorized test without customer data or a real paid purchase.
  • Find the event reference with the correct reporting time zone and filters.
  • Check duplicate handling before retrying after an uncertain response.

Frequently asked questions

Does HTTP 200 mean that my conversion was attributed?

Not on its own. Check the destination's response contract and locate the event in its report. Request delivery, data processing and commercial attribution are different checks and should be recorded separately.

Can the same postback cover every campaign?

It can when your tools and campaign rules support that scope. Confirm the coverage and how a campaign-specific exception behaves: it may replace the global setting or create an additional notification.

What should I send my manager when a test fails?

Include the campaign, time and time zone, tracker, expected event, test reference and the first step where the result differed from expectations. Redact sensitive information and never publish private keys or complete personal tracking links.

Sources and references

  1. Voluum: parameters in postback URLs

    Explains Voluum click IDs and the cid parameter; parameter names must not be assumed to be universal.

  2. Google Analytics: validate events

    Documents Measurement Protocol validation as a separate check; cited as an illustration, not as the Cash Nutra response contract.