TrackSure Cloud – Server Side Tracking, Meta Pixel CAPI, GA4, Conversion Tracking & Analytics for WordPress & WooCommerce
Ad blockers, iOS 14+ restrictions, and cookie limitations mean your browser-based tracking pixels report only a fraction of your actual conversions. When ad platforms can't see your real sales data, they can't optimize — and your ROAS drops.
TrackSure Cloud fixes this by sending conversion events directly from your WordPress server to Meta (Conversion API), Google Analytics 4 (Measurement Protocol), TikTok, and Pinterest — bypassing browser limitations entirely. But TrackSure is more than a conversion pixel: it's a complete first-party analytics platform with user journeys, funnel tracking, goal management, revenue attribution, and real-time analytics — all stored in your WordPress database.
Documentation | Support | GitHub | Get Pro
Why Server-Side Tracking Matters
Around 40% of internet users run ad blockers. Safari limits cookies to 7 days. iOS App Tracking Transparency reduced reported conversions by 30–40% for many advertisers. When your tracking relies only on a browser pixel, these restrictions silently discard your conversion data.
Server-side tracking sends conversion events directly from your server to the ad platform API. Ad blockers can't block it. Cookie limits don't apply. The result: your ad platforms see your real conversions, optimize better, and your ad spend delivers higher ROAS.
TrackSure sends API calls directly from your WordPress server — no GTM server container, no external cloud, no routing data through third-party services.
What TrackSure Does
Server-Side Conversion Tracking (CAPI)
- Meta Conversion API — send purchase, view content, add to cart, checkout, and page view events server-to-server
- Google Analytics 4 Measurement Protocol — server-side GA4 event forwarding
- TikTok Events API and Pinterest Conversion API (Pro)
- Automatic browser + server event deduplication — each event gets a unique ID shared between client and server so platforms count it once
First-Party Analytics Dashboard
- All analytics data stored in your WordPress database — you own every byte
- Automatic traffic source detection — organic search (Google, Bing, DuckDuckGo), social media (Facebook, Instagram, LinkedIn, TikTok), email, referrals, AI chatbots (ChatGPT, Claude, Perplexity), and direct — identified without UTM tags
- Session-based user journeys with 30-day attribution window (configurable)
- Five attribution models: first-touch, last-touch, linear, time-decay, position-based
- Assisted conversion reporting — see which channels helped even without getting final credit
Goals, Funnels & Conversion Tracking
- Custom conversion goals for form submissions, purchases, downloads, video views, or any event
- Funnel visualization — see where visitors drop off in your checkout or signup flow
- Goal completion rates with trend analysis
- Revenue attribution — connect each sale to its traffic source, campaign, and touchpoint
User Journeys & Session Tracking
- Complete path from first page visit to final conversion — including all touchpoints across multiple sessions
- Time between visits, number of sessions to convert, and which content moved visitors closer to purchasing
- Real-time visitors — see who is on your site now and what pages they're viewing
eCommerce Conversion Tracking
- Auto-tracks the full purchase funnel: product view → add to cart → checkout → purchase
- Works with WooCommerce and FluentCart (Free), Easy Digital Downloads, SureCart, Cartflow, and MemberPress (Pro)
- Revenue attribution — connect each sale to its traffic source and campaign
- Checkout funnel visualization with drop-off rates at each step
Privacy & Compliance
- GDPR and CCPA ready with built-in consent manager support (Cookiebot, CookieYes, OneTrust, and more)
- Cookieless tracking option (uses localStorage instead of cookies — no consent banner required in some jurisdictions)
- IP anonymization, Do Not Track (DNT) support, and WordPress privacy tools integration
- No data leaves your server unless you explicitly enable an ad platform destination
Who Is TrackSure For?
- WooCommerce & FluentCart store owners running paid ads who need more accurate conversion data for Meta, Google Ads, and other platforms
- Bloggers & content creators who want to see which posts bring the most traffic, engagement, and conversions
- Small business owners who need simple, privacy-friendly analytics without Google Analytics complexity
- Digital marketers managing ad campaigns who want user journey tracking, funnel visualization, and multi-touch attribution
- Agencies & freelancers who need analytics and conversion tracking across client sites (Pro includes white label)
- Privacy-focused site owners who want GDPR-compliant analytics without sending data to external services
- Developers who need JavaScript and PHP APIs for custom event tracking with WordPress hooks
Why TrackSure
- All-in-one solution — server-side conversion tracking, first-party analytics, user journeys, funnels, goals, and attribution in a single plugin
- No GTM required — no server container setup, no custom subdomain, no separate hosting
- No external cloud — your analytics data stays in your WordPress database. Conversion data goes directly from your server to the ad platform API
- Works on any WordPress site — WooCommerce and FluentCart stores get automatic ecommerce event tracking; non-ecommerce sites use goals and custom events for leads, signups, or any conversion
- Five-minute setup — install, activate, and analytics data starts appearing in your dashboard. Add a Meta Pixel ID and Access Token for server-side conversion tracking
Free vs Pro
Free includes everything you need for analytics and conversion tracking:
- First-party analytics dashboard with user journeys, funnels, goals, and attribution
- Real-time visitor tracking
- Meta Pixel + Conversion API (CAPI) server-side tracking
- Google Analytics 4 + Measurement Protocol server-side tracking
- WooCommerce and FluentCart automatic ecommerce tracking
- All form plugins (Contact Form 7, Gravity Forms, WPForms, Fluent Forms, Elementor Forms)
- All page builders (Elementor, Divi, Beaver Builder, Gutenberg, WPBakery, Oxygen, Bricks)
- Five attribution models with assisted conversion reports
- Consent management integration
- Unlimited events and sessions
Pro adds advanced ad platforms and ecommerce integrations:
- 14+ ad platform destinations: TikTok, Pinterest, LinkedIn, Snapchat, Reddit, Google Ads, Microsoft Ads, Twitter/X, Taboola, Outbrain, and more
- Advanced ecommerce: Easy Digital Downloads, SureCart, Cartflow, MemberPress, LearnDash, Amelia, WooCommerce Bookings, GiveWP
- Cart abandonment emails, session recording, heatmaps, cohort analysis, predictive analytics
- Email marketing sync (Mailchimp, ActiveCampaign, Klaviyo)
- White label for agencies
- Priority support with 24-hour response time
Integrations
- eCommerce: WooCommerce, FluentCart, Easy Digital Downloads (Pro), SureCart (Pro), Cartflow (Pro), MemberPress (Pro)
- Forms: Contact Form 7, Gravity Forms, WPForms, Fluent Forms, Elementor Forms
- Builders: Elementor, Divi, Beaver Builder, Gutenberg, WPBakery, Oxygen, Bricks
- Ad Platforms: Meta (Facebook/Instagram), Google Analytics 4, Google Ads (Pro), TikTok (Pro), Pinterest (Pro), LinkedIn (Pro), Snapchat (Pro), Microsoft Ads (Pro), Reddit (Pro), Twitter/X (Pro), Taboola (Pro), Outbrain (Pro)
- Consent: Cookiebot, CookieYes, OneTrust, and custom consent filters
For Developers and Advanced Marketers
TrackSure exposes JavaScript and PHP APIs for custom event tracking, plus WordPress hooks for extending every part of the tracking pipeline.
JavaScript API — available on every frontend page via window.TrackSure:
window.TrackSure.track('button_click', { button_name: 'Download PDF' });
PHP API — record server-side events from form handlers, webhooks, or cron jobs: tracksure()->core->get_service('event_recorder')->record([…]);
WordPress Hooks:
– tracksure_filter_event_data — modify event data before storage
– tracksure_session_started — trigger custom logic on new sessions
– tracksure_conversion_recorded — sync conversions to CRM, email, or external systems
Full API documentation with code samples: tracksure.cloud/docs
Getting Started
- Install and activate TrackSure Cloud from the WordPress plugin directory
- Visit TrackSure → Settings to review tracking and privacy options
- (Optional) Add your Meta Pixel ID + Access Token or GA4 Measurement ID for server-side conversion tracking
- Go to TrackSure → Overview — analytics data starts appearing after 1 hour
External services
This plugin connects to external third-party services to provide its functionality. Below is a complete list of all external services used, when they are called, what data is transmitted, and links to their terms of service and privacy policies.
When You Enable Meta Pixel / Conversion API:
- Service: Meta (Facebook) Graph API
- Purpose: Send conversion events (purchases, add-to-cart, page views) to Facebook for ad optimization
- What data is sent: Event name, timestamp, hashed user email/phone (if available), product SKU, revenue, IP address, user agent, pixel ID
- When it's sent: Automatically when a tracked event occurs (product view, purchase, etc.) and Meta destination is enabled in settings
- Service provider: Meta Platforms, Inc.
- Terms of Service: https://www.facebook.com/legal/terms
- Privacy Policy: https://www.facebook.com/privacy/policy
- Data Processing Agreement: https://www.facebook.com/legal/terms/dataprocessing
When You Enable Google Analytics 4:
- Service: Google Analytics 4 Measurement Protocol
- Purpose: Send analytics events to Google Analytics for website traffic analysis
- What data is sent: Event name, page URL, referrer, session ID, client ID, IP address, user agent, device information
- When it's sent: Automatically when page views or custom events occur and GA4 destination is enabled in settings
- Service provider: Google LLC
- Terms of Service: https://marketingplatform.google.com/about/analytics/terms/us/
- Privacy Policy: https://policies.google.com/privacy
When Loading Google Tag Manager Script (If Enabled):
- Service: Google Tag Manager CDN
- Purpose: Load gtag.js library for browser-side Google Analytics tracking
- What data is sent: Standard HTTP request data (IP address, user agent, referrer) when loading the script
- When it's sent: On every page load when GA4 browser tracking is enabled
- Service provider: Google LLC
- Script URL: https://www.googletagmanager.com/gtag/js
- Terms of Service: https://marketingplatform.google.com/about/analytics/terms/us/
- Privacy Policy: https://policies.google.com/privacy
When Loading Facebook Pixel Script (If Enabled):
- Service: Facebook Connect CDN
- Purpose: Load fbevents.js library for browser-side Facebook Pixel tracking
- What data is sent: Standard HTTP request data (IP address, user agent, referrer) when loading the script
- When it's sent: On every page load when Meta Pixel browser tracking is enabled
- Service provider: Meta Platforms, Inc.
- Script URL: https://connect.facebook.net/en_US/fbevents.js
- Terms of Service: https://www.facebook.com/legal/terms
- Privacy Policy: https://www.facebook.com/privacy/policy
Cloudflare IP Detection (Always Active):
- Service: Cloudflare IP Ranges API
- Purpose: Fetch current list of Cloudflare proxy IP addresses to accurately detect real visitor IPs behind Cloudflare CDN. A bundled static list is included as fallback.
- What data is sent: Standard HTTP request headers only (no user data transmitted)
- When it's sent: Once per day (cached for 24 hours) to refresh the Cloudflare IP list. The plugin includes a bundled fallback list and works without this request.
- Service provider: Cloudflare, Inc.
- API URLs: https://www.cloudflare.com/ips-v4 and https://www.cloudflare.com/ips-v6
- Terms of Service: https://www.cloudflare.com/website-terms/
- Privacy Policy: https://www.cloudflare.com/privacypolicy/
IP Geolocation (When Tracking Is Enabled):
- Service: ipapi.co (primary), ip-api.com (secondary fallback), WordPress.com Geo API (tertiary fallback)
- Purpose: Determine the country, region, and city of visitors based on their IP address for geographic analytics reporting
- What data is sent: The visitor's IP address is sent to one of the geolocation providers. No other user data is transmitted.
- When it's sent: When a new visitor session is recorded and the IP has not been looked up recently. Results are cached for 24 hours per IP.
- Service providers and policies:
- ipapi.co (primary) – https://ipapi.co/privacy/ and https://ipapi.co/terms/
- ip-api.com (fallback) – https://ip-api.com/docs/legal
- WordPress.com Geo API (fallback) – https://automattic.com/privacy/ and https://wordpress.com/tos/
Important Notes:
- No automatic data sharing: TrackSure does NOT send any data to third-party services unless you explicitly enable and configure them in TrackSure Settings → Destinations.
- Consent-aware: If you use a cookie consent plugin (Cookiebot, CookieYes, etc.), TrackSure will respect user consent choices and only fire pixels after consent is granted.
- First-party analytics: TrackSure's core analytics features store all data in your WordPress database. No external services are used for analytics unless you enable Google Analytics 4 or other destinations.
- You control the data: You choose which platforms to enable, what events to track, and what user data to include (emails, phones, etc.).
For more information about data privacy and compliance, see the Privacy & GDPR Compliance section below.
Source Code & Build Instructions
The admin interface is built with React 18 and TypeScript, compiled with Webpack 5. The compiled files in admin/dist/ are generated from the source code in admin/src/.
Full source code is available on GitHub: https://github.com/tracksure-cloud/tracksure
To build from source:
- Navigate to the
admin/directory - Run
npm installto install dependencies - Run
npm run buildfor a production build, ornpm run devfor development mode with watch
Build tools used:
- Node.js (v18+)
- npm
- Webpack 5 (config:
admin/webpack.config.js) - TypeScript 5 (config:
admin/tsconfig.json) - ts-loader for TypeScript compilation
Key source directories:
admin/src/— React/TypeScript source code (pages, components, contexts, hooks)admin/dist/— Compiled production JavaScript (generated by Webpack)assets/js/— Frontend tracking scripts (non-compiled, human-readable)includes/— PHP backend (non-compiled, human-readable)
Privacy Policy
TrackSure stores the following data in your WordPress database:
Tracking Data (90-day retention): – Page URLs visited – Referrer URLs – UTM campaign parameters – Device type (desktop/mobile/tablet) – Browser and OS information (user agent) – IP address (can be anonymized) – Session duration and engagement metrics
For E-commerce (if using WooCommerce/FluentCart/EDD/SureCart): – Product views – Cart actions – Order completion (order ID, total, items) – Customer email and phone (hashed when sent to Meta/GA4)
External Data Sharing (Optional):
TrackSure stores all analytics data locally in your WordPress database. No data is sent to external services unless you enable ad platform integrations.
Privacy Controls: – IP Anonymization: Available in Settings → Privacy. Default is off for accurate geo reporting; enable it for GDPR compliance. – Cookieless Mode: Uses localStorage instead of cookies to avoid cookie consent requirements. – Consent Integration: Respects Cookiebot, CookieYes, OneTrust, and custom consent filters.
Supported Third-Party Services:
TrackSure connects to the following services only when you enable them and provide API credentials.
1. Meta (Facebook/Instagram) – Available in Free & Pro – Method: Server-to-Server via Meta Graph API (CAPI) – Data Sent: Event data (PageView, ViewContent, AddToCart, Checkout, Purchase), Hashed user data (email, phone, IP, User Agent) – Purpose: Ad optimization and attribution
2. Google Analytics 4 (GA4) – Available in Free & Pro – Method: Server-to-Server via Measurement Protocol – Data Sent: Event parameters, Client ID, User Agent, IP – Purpose: Analytics reporting
3. Pro-Only Integrations (Add-ons) – Google Ads: Sends offline conversion adjustments via Google Ads API. – TikTok: Sends web events via TikTok Events API. – Pinterest: Sends conversion events via Pinterest API. – Snapchat: Sends conversion events via Snapchat Conversions API. – Microsoft Ads: Sends offline conversions via Microsoft Ads API. – LinkedIn: Sends conversion events via LinkedIn CAPI.
You must obtain user consent before enabling these destinations (GDPR/CCPA requirement).
Your Responsibilities:
- Disclose TrackSure's tracking in your privacy policy
- Obtain consent before tracking (if required by law)
- Configure data retention periods appropriately
- Enable IP anonymization if required
Data Deletion:
Users can request data deletion via WordPress Privacy Tools or TrackSure Settings → Privacy.
Support
Free Support:
Pro Support:
- Email support with 24-hour response time
- Priority bug fixes
- Feature requests
- Implementation consulting
Trademarks & Third-Party Services
TrackSure integrates with various third-party analytics and advertising platforms. All trademarks, service marks, and company names mentioned in this plugin are the property of their respective owners.
Third-Party Platforms: – Meta, Facebook, Instagram, and Facebook Pixel …
