Why CPA retargeting outperforms CPM in a cookieless world.

Third-party cookies are leaving the building. Safari and Firefox already block them by default, and Chrome's phased deprecation continues to compress what's possible for traditional retargeting. The pricing model you choose now will decide whether your retargeting line item survives the next 24 months.

For the better part of a decade, retargeting ran on a simple premise: pay for impressions (CPM), accept the attribution model your DSP gave you, and trust that the math worked out. It mostly did — when cookies covered 80%+ of browsers, when view-through windows were generous, and when adtech vendors had every incentive to claim credit.

All three of those conditions have weakened. And that weakening is exactly why cost-per-acquisition (CPA) retargeting has quietly become the cleaner buy.

What CPM actually buys you now

A CPM buy in 2025 means you're paying for delivered impressions across a measurable surface that is, in many key audiences, shrinking. iOS users — a disproportionately high-value cohort for many ecommerce brands — are largely invisible to third-party cookie-based retargeting. Mac and Windows Safari users similarly. Privacy-Sandbox-era Chrome will degrade frequency capping and audience precision further.

None of this stops impressions being delivered. It just means a growing share of those impressions land on people you can't accurately identify, on devices where you can't reliably cap frequency, attributed through models that increasingly rely on modelled (read: estimated) conversions.

You pay the same price either way.

What CPA changes

A CPA model flips the risk allocation. The retargeting partner is paid only when a measurable, attributable sale occurs. That single change has downstream effects most brands underestimate:

• Incentive alignment. The partner now bears the cost of wasted impressions, mis-targeted audiences, and degraded identifiers. They optimise aggressively because their margin depends on it.
• Cleaner measurement pressure. Both sides need a sale definition both sides trust. That conversation usually leads to first-party post-back, order-ID matching, or holdout testing — which is exactly the measurement quality every brand should want regardless.
• Reduced platform lock-in. Because the partner is buying the media, you're no longer renting a self-serve DSP seat and absorbing its tech tax. The integration is lighter, the contract is simpler, and the unit you're paying for is the unit you actually wanted.

The objection: "But we lose visibility into the buy"

This is the most common pushback we hear, and it's a fair one. The fix is not to demand CPM-style impression logs that no longer mean what they once did — it's to renegotiate what visibility actually means in a CPA arrangement.

In practice, the visibility brands need from a CPA retargeting partner is: holdout-validated lift, order-level reconciliation, and the ability to audit fraud signals if anything looks off. None of those require an exposed CPM. All of them are stronger forms of accountability than impression-level logs.

Where CPM still has a role

To be honest about it: CPM retargeting hasn't disappeared, and it shouldn't. Prospecting, brand-lift campaigns, and any activity where the conversion is upstream of a measurable on-site event still need impression-based pricing. The argument here is narrower — for retargeting, the layer of the funnel closest to a transaction, the CPA model is now the structurally cleaner default.

The takeaway

The cookieless transition isn't a forecast anymore. It's the operating environment. CPA retargeting works because it survives the things CPM increasingly can't: identifier degradation, attribution uncertainty, and a media buyer's incentive to inflate credit. If you're still paying CPMs for the bottom of your funnel in 2025, the question to ask your partner isn't whether their model still works — it's whether their incentives still align with yours.