Most affiliate marketers know they need a disclosure somewhere — and assume a sentence buried in the footer is sufficient. It’s not. The FTC’s enforcement guidelines specify that disclosures must be clear, conspicuous, and in close proximity to the content they apply to. A single footer disclosure on a 2,000-word review article doesn’t meet the standard.
This guide covers the specific legal documents and disclosure placements that affiliate sites need in 2026, with practical examples of compliant disclosure language.
Note: This article provides general information, not legal advice. Consult a licensed attorney for guidance specific to your situation.
The Short Answer
Every affiliate site operating in the US needs: an FTC-compliant affiliate disclosure on each page with affiliate links (at the top, before the first link), a privacy policy page (required for any site collecting user data, including Google Analytics cookies), and a terms of service page. If you serve EU traffic, you also need GDPR cookie consent mechanism. If you’re in California and have enough traffic, CCPA applies. The disclosure requirement is the one most affiliates get wrong — it must be above-the-fold, not just in the footer.
Required Legal Documents
1. FTC Affiliate Disclosure
The FTC’s Endorsement Guides require material disclosure of affiliate relationships. An affiliate commission is a “material connection” that must be disclosed whenever a recommendation is made.
What the FTC requires:
- Disclosure must be clear and conspicuous — meaning a reasonable person would notice and understand it
- Disclosure must be in close proximity to the endorsement or recommendation
- Disclosure must use plain language (not legal jargon like “this post may contain affiliate links” buried in legalese)
FTC-compliant disclosure language examples:
- “This article contains affiliate links. If you buy through my links, I earn a commission at no extra cost to you.”
- “Affiliate disclosure: Some links on this page are affiliate links. When you click and purchase, I may receive compensation. This doesn’t affect my recommendations.”
- “I earn commissions from links on this page. This doesn’t change what I recommend — only products I’d recommend to a friend appear here.”
Placement requirements:
- At the top of the page before the first affiliate link appears
- In email: before the first affiliate link in the message
- Social media: in the post itself (not just a profile link to a disclosure page)
What’s NOT sufficient:
- A single disclosure page on your site that visitors have to find themselves
- A footer disclosure on a page with affiliate links in the body
- Abbreviations like “#ad” without explanation (though FTC has indicated “#ad” is sufficient on social media)
2. Privacy Policy
A privacy policy is legally required for any website that collects personal data. If you use Google Analytics, a contact form, an email opt-in, or any other data collection mechanism, you need a privacy policy.
What your privacy policy must cover (US/general):
- What data you collect (cookies, email addresses, IP addresses)
- How you use that data (analytics, email marketing)
- Third parties you share data with (Google, your ESP, affiliate networks)
- How users can request data deletion or access
- Data retention period
- Contact information for privacy inquiries
For EU visitors (GDPR):
- Legal basis for data processing (consent, legitimate interest, etc.)
- Right to access, correct, delete, and port data
- Right to withdraw consent
- Data Protection Officer contact (if applicable)
Privacy policy generators: Termly (free/paid), iubenda ($9.99/mo), or Rocket Lawyer are commonly used. These generate policies that you customize — but verify they cover your specific data practices.
3. Terms of Service (Terms and Conditions)
Terms of Service define the rules for using your website. For affiliate content sites, this primarily covers: content ownership and copyright, limitation of liability for information provided, acceptable use policy, and dispute resolution.
Less legally critical than the privacy policy for most affiliate sites, but required by some affiliate programs (Amazon Associates requires it) and professionally expected.
4. GDPR Cookie Consent (EU Traffic)
If your site receives traffic from EU/EEA countries and uses tracking cookies (Google Analytics, Meta Pixel, etc.), GDPR requires affirmative consent before dropping non-essential cookies.
Implementation options:
- Cookiebot (free for 1 domain under 100 pages, $14/mo otherwise) — auto-detects cookies and generates compliant consent interface
- OneTrust (free tier, paid from $29/mo) — enterprise-grade, more complex
- Cookie Notice & Compliance (free WP plugin) — basic but functional for smaller sites
Note: Plausible and Fathom Analytics are designed to be used without cookie consent banners — they don’t use cookies or collect personal data. Switching to these tools eliminates the consent requirement for analytics.
5. Affiliate Program-Specific Disclosures
Several affiliate programs have specific disclosure requirements beyond FTC guidelines:
| Program | Specific Requirement |
|---|---|
| Amazon Associates | ”As an Amazon Associate I earn from qualifying purchases.” — must appear on any page with Amazon links |
| ShareASale / Commission Junction | Follows FTC guidelines; verify specific program terms |
| ClickBank | Standard FTC disclosure sufficient |
| Most SaaS programs | Standard FTC disclosure sufficient |
The Amazon Associates disclosure is required verbatim — “As an Amazon Associate I earn from qualifying purchases.” — not a paraphrase.
Implementing Disclosures Correctly
For WordPress sites:
- Create a custom widget or block that displays the disclosure text
- Add it to the top of every post via your theme’s single.php template or a site-wide hook
- For email: add disclosure text to your email template before the first affiliate link
For static site frameworks: Add the disclosure as a component in your article layout template — it will automatically appear on all articles.
Placement template for article disclosure:
---
[Affiliate disclosure: This article contains affiliate links.
If you purchase through these links, I may earn a commission
at no additional cost to you. I only recommend products I use
and trust.]
---
[Article content begins here]
Common Mistakes
1. Disclosure only in the footer A footer disclosure doesn’t satisfy FTC’s “clear and conspicuous, in close proximity to the endorsement” standard. The disclosure must appear before the first affiliate link in the content.
2. Using vague disclosure language “This post contains links” is not an adequate disclosure. The disclosure must explicitly state you earn money from clicks or purchases — the word “affiliate” or “commission” should appear in the disclosure.
3. No disclosure in email campaigns FTC rules apply to email, social media, and any other medium where you make affiliate recommendations. Your email templates should include a disclosure before the first affiliate link.
4. Not updating the privacy policy when adding new tools When you add a new analytics tool, email platform, or ad retargeting pixel, your privacy policy should be updated to reflect the new data collection and sharing. Review your privacy policy quarterly.
5. Relying on a single disclosure page linked from the footer Some affiliates add one “Affiliate Disclosure” page and link to it from the footer rather than adding disclosures to individual pages. This doesn’t meet the FTC standard — the disclosure must be on each page that contains affiliate links.
FAQ
Does the FTC enforce affiliate disclosure violations against small bloggers?
The FTC has issued warnings and fines primarily to brands, large influencers, and publishers — not to small affiliate bloggers. However, individual affiliate programs (especially Amazon Associates) actively review compliance and terminate non-compliant accounts. Compliance protects your affiliate program relationships more immediately than FTC enforcement.
Can I use a template privacy policy I found online?
Free privacy policy templates are a starting point, not a finished document. They must be customized to reflect your actual data practices. A template that mentions data categories you don’t collect (or doesn’t mention ones you do) is inaccurate and potentially problematic.
Do I need a disclosure on every single page or just pages with affiliate links?
Only on pages with affiliate links. If you have “about” or “contact” pages with no affiliate links, no disclosure is needed. Use conditional disclosure display in WordPress (show disclosure only on posts with specific tags or custom fields).
Does cloaking affiliate links change my disclosure requirement?
No — disclosure is required regardless of whether the affiliate link is cloaked, shortened, or displayed in full. The disclosure requirement is based on the presence of an affiliate relationship, not the format of the link.
What are the penalties for non-disclosure in the US?
The FTC can issue warning letters, require corrective advertising, and impose civil penalties up to $50,120 per violation for knowing violations. For individual affiliate bloggers, the more immediate risk is affiliate program termination for non-compliance.
Get the Full System
Legal compliance is covered in the technical setup module of AI Affiliate Marketing Mastery. The full course covers disclosure templates, privacy setup, and the complete operational infrastructure.
Recommended
AI Affiliate Marketing Mastery
12 lessons, 6 modules — niche research, content at scale, SEO, email automation, paid traffic, and advanced tactics. Build a $10K/month affiliate site.
Related
- AI Affiliate Technical + Advanced — Module 6 pillar
- FTC Compliance for Affiliate Marketing — FTC rules in depth
- WordPress Affiliate Stack 2026 — where to implement disclosures
- AI Affiliate Marketing Mastery Course — course hub