The parameters are how you get to the store.
If the creator is driving the traffic, Gumroad takes 10%. If Gumroad is driving the traffic, they take a commission of 30%
Not any more than any other tracking method. They control it all.
If anything, the fact that they give you a method to alter how your purchase is tracked so you can still give the creator 90% when you get to them through their store is pro-creator.
The ability to alter the tracking is an exploit, not a feature. Don’t get me wrong, I’m glad it’s possible, but it seems more a result of a lazy implementation rather than a generous choice.
Not any more than any other tracking method.
This isn’t true. There are more opaque ways to track this like cookies, redirects (triggering an api call), and scripts. These could also be exploited depending on how they’re done, but it would be way less obvious than just changing the URI.
It just seems like they chose the simplest method, thus hampering the effectiveness of their greed.