Could you share your country/continent and payment options? A couple of those vendors deliver worldwide, some accept BTC, others also accept different payment options like PP.

I'm going to try the free version at home tonight... Is the linux version 32 bit? (i'm asking because i'd like to try it on my old 32 bit laptop running opensuse 13.1, if it's 64 bit it's no use searching for the power adaptor of my old laptop )
Also, are there dependancies?

I'm sorry, but are you talking about a hardware wallet? Why wouldn't they be secure?
With a hardware wallet, your private keys are not accessible from the web, nor from a pc. They are stored on the hardware wallet itself, i think that's pretty secure. Worst thing that can happen is one of those virusses that replaces the address you want to send coins to when you copy/paste it from a mail or a website. But this risk is equally big with any kind of transaction you want to generate, so you always have to double-check.

For personal use, you can use the prune option... when using this option, i think the blockchain is somewhere around 6-10Gb (untested by me)

I love mycelium, i have it on my android phone, but i do not completely believe it would be safer to keep your coins on your mobile compared to holding them on your PC...
IMHO, the safest place to store your coins is on a hardware wallet or correctly generated paper wallet.

Which country are you from? Most countries i know off don't seem to care about bitcoin, as long as you pay taxes on your deals

They're the best... I used to use an android wallet to keep pocket change, electrum to keep a couple hundred dollars worth of BTC and paper wallets to store my main funds... Paper wallets are great, but you have to keep on making them, sweeping them, trashing them,... In the end, it's a big hassle. Now, i've invested a lousy 18 bucks, and i'll never have to reboot with a live cd, unpack bitaddress, generate wallets, put them on a usb, print them, erase the usb,... Just pop in the stick, open the client and transfer 

If you read the code kn_b_y has produced, you'll see that it's not only possible, but even not that hard to do... If you're not familiar with python, i already gave a basic start on how to solve the problem with perl (altough kn_b_y's version is a lot better, it only produces valid private keys)

I finally gave in and bought a HW.1 just last week... I wonder how i lived without it
It keeps my private keys as safe as using a paper wallet, while i can still use it without completely sweeping it and making a new one. 

I found coinpayments.net very easy to work with... Their API was really clear, and they had plugins for wordpress and shopping carts.
Mind you: this was over a year ago, so other payment networks might have risen since then.

I think you're right on this point, BIP38 encryption is pretty strong (AFAIK), it's not  that fast to brute-force with current technology. However, i would never give my encrypted private key to somebody i didn't know... No offense, but i just wouldn't do that.

It'll probably take a while, but since you added 12,5 satoshi's per byte, you'll still have a decent chance it'll be added to a block

At the moment, the estimation is within , on average, 25 blocks for this fee: https://bitcoinfees.21.co/

Offcourse, there's alway a possibility that the mempool will drop the transaction before it's included, but there's nothing you can do about it i'm afraid (unless you can convince the exchange to double spend the inputs to create a new transaction to you, but with a higher fee)

Thanks for your answers, i would still like to OP to answer the 3 out of 5 questions that were answered by jacee but not completely clear, even after his/her answer:
- the fact you will not give detailed information is clear, it does not mean, however, general statistics wouldn't come in handy. I don't care about the address that sent money, nor do i care about the country that sent the refferal... I do care about how much traffic i have sent from which url, and how much profit was generated for me
- since we both agree, i think the OP should either confirm or deny that he'll make promo materials
- can the OP confirm onion traffic won't be counted?

The other questions (minimum withdrawal and automatic withdrawal were sufficiently answered by jacee...

Last time i used the shared coin-option in blockchain.info i did have to wait a long time because apparently, they're not adding a lot of fees to the transactions... Which is rather odd to me.
I ended up sharing inputs and outputs with about 20-30 other adressess, it was pretty good, the taint analysis didn't find anything substantial, neither did walletexplorer... I did read however that the process isn't perfect, but for me it's good enough.

Some questions about your affiliate program:

• Can you offer some statistics to your affiliates? right now, and affiliate has no way of knowing how much traffic he sends, where the traffic comes from, if it converst, what his/her current saldo is,...
• I think some promo tools are necessary, banners, standard texts,...
• you have a tor version of your site, will the affiliate code also work for visitors sent over tor?
• what is the minimal withdrawal ammount?
• will withdrawals be automatic?

I don't think there is a pre-made list of available dev's, just open a topic [WTB] new altcoin development or  [SEEKING] altcoin dev (paying job)... Something like that might be good enough to attract some devs for your project.

https://bitcointalk.org/index.php?topic=983296.0

That being said: if you want to be sure you won't get ripped off (or at least, 98% sure), hire somebody from this forum and use an escrow.
Make a topic, write down every aspect of the coin you want to be created and ask for quotes.

Pick somebody that has had some positive feedback with this kind of work, and send enough funds to cover the creation process to a trusted escrow. Once the dev sends you the sourcecode, compiled wallets,... the escrow can release your funds to the dev

Seems really hard to do, usually a site cannot read cookies from a different origin (other sites cookies)
https://en.wikipedia.org/wiki/Same-origin_policy
http://lifehacker.com/5461114/fact-and-fiction-the-truth-about-browser-cookies
http://stackoverflow.com/questions/17663749/is-it-possible-to-read-3rd-party-cookies

I'm not the owner of this particular site, nor do i know the owner or the OP. I have been on bitcointalk for a while tough, and i've seen this site in a couple discussions, but i haven't seen anybody that found malicious code on it. I don't particularly like the rules nor the gameplay of this site, so i would never send a satoshi it's way, but that doesn't mean i think it's malware.
That being said: it's not impossible for a site to be malicious, caution is always advisable when browsing the web.

It's just the (very old) fishbitfish gambling site... It has been around for a long time, and isn't infected (AFAIK).
@OP: it wouldn't be to hard to write such a script, i'm pretty sure you could find a dev to write if for you (for a nominal fee). I can even make you a quote for the scripting if you want (without design, i'm not a designer).

I'll let you know if it ever happens again 
Great product, even better to see you're active on the forum, and responding to questions your users have: +1