I was under the assumption that SIDs were just for us (affiliates) to use and see. However, I just found that the SID does get passed to the actual merchant (in the URL). WTH!!?? My PPC campaigns include the keyword in the SID, so this means the merchant can now see the keywords I'm bidding on. Am I the only one that doesn't want the merchant seeing exactly what I'm bidding on?
You have the option to encrypt the sid or to store the keyword into your db and use the id number as sid.
Yeah I've already decided to go the 2nd route...generate unique id's on the fly and store the actual stuff in a db.