Cherry Seed

Why are my Safari users showing as 'direct' traffic?

safari direct-traffic cookie-expiry itp attribution woocommerce ga4

Quick Answer

Safari users appear as direct traffic because their tracking cookies expire before they convert. Safari ITP limits JavaScript-set cookies to 7 days for standard browsing and just 24 hours for traffic arriving from classified ad platforms like Facebook and Google. According to WebKit's documentation, when a user returns after the cookie window closes, GA4 has no stored identifier and no referral header — so it categorises the visit as direct. For a WooCommerce store with a 10-day average purchase cycle and 30% Safari traffic, this means roughly 15-25% of paid conversions are being misreported as direct visits.

Full Answer

The Safari direct traffic problem is one of the most financially damaging attribution gaps in e-commerce, and understanding the exact mechanism reveals why it cannot be solved with client-side tracking alone.

The sequence works like this: a customer clicks a Facebook ad on Monday, lands on your WooCommerce store, and Safari sets a first-party cookie storing the traffic source. Because the click came from a classified tracking domain, Safari's ITP restricts that cookie to a 24-hour lifespan. When the customer returns on Thursday to complete their purchase, the cookie is gone. GA4 receives a session with no stored identifier, no utm parameters, and no referrer header — so the platform defaults to direct.

The financial impact is that your Facebook Ads Manager shows fewer conversions, your ROAS calculation drops, and algorithm-based bidding optimises against incomplete data. Meanwhile, your GA4 direct traffic channel inflates, masking the true performance of paid acquisition channels.

The scale of this problem depends on three variables: your Safari traffic percentage (25-45% in most English-speaking markets), your average time-to-purchase (longer cycles lose more), and how many of your paid channels are classified by ITP. Google, Facebook, TikTok, and most major ad platforms are all classified.

Server-side tracking solves this by capturing the original traffic source at the server level during the first visit and maintaining that attribution data independently of browser cookies. When the customer returns days later, your server matches the session to the original source regardless of what Safari has done to the cookie.

Sources

Programmatic Access

GET https://seresa.io/wp-json/cherry-tree-by-seresa/v1/seeds/699

Cite This Answer

Cherry Tree by Seresa - https://seresa.io/seed/safari-browser-privacy/safari-killing-attribution-safari-users-direct-traffic