Apple’s Safari Blocklist Is Cloud-Managed. Your Backup Parameter Is a Bet.
Apple’s iOS 26 Link Tracking Protection is not driven by a static list inside iOS. Apple maintains the blocklist server-side via the WebPrivacy service, which updates dynamically and is cached in WebKit. That means any tracking parameter — gclid, fbclid, msclkid, or any 2026 backup like aclid or acid — can be added to the strip list with zero iOS release notes. The only mitigation that survives a future cloud push is server-side click-ID capture: once persisted as WooCommerce order meta, the value is no longer reachable by any Safari update.