CAPI Suite vs Pixelavo – Server Side Tracking & Pixel + AI Ads Tools

Meta Pixel, Pinterest and TikTok, sent server-side, in one free plugin. A bundled Google Tag Manager template covers browser-side tracking. Sixteen events you switch on individually — PageView, ViewContent, ViewCategory, SelectItem, AddToCart, ViewCart, InitiateCheckout, AddShippingInfo, AddPaymentInfo, Purchase, Search, CompleteRegistration, AddToWishlist, Lead, Login and Comment — plus subscription renewals handled on their own terms. Classic and block-based checkout, HPOS compatible, each platform retried independently on failure. No cloud server to rent, no premium tier to unlock, no event limit. Your match quality climbs on its own after you update. Twenty identity parameters are assembled per event and normalised exactly the way Meta requires before they are hashed. The hashed keys are then remembered for up to 180 days behind a consent gate, so a returning visitor arrives already identified instead of anonymous. Nothing raw is ever written to disk: only salted SHA-256 hashes, which survive even a WordPress security-key rotation. Attribution survives the whole journey, not just the click. Eight click identifiers are captured and kept — fbclid, gclid, wbraid, gbraid, ttclid, pina_id, _epik and _ttp — written into first-party cookies client-side so a cached landing page never loses them, then persisted onto the order so a payment that completes days later is still credited to the campaign that earned it. Subscription renewals inherit the original order’s identifiers instead of being credited to a fresh ad. Bots don’t get counted as customers — and real shoppers on a VPN still are. Datacenter ranges are weighed against actual browser behaviour: mouse movement, scrolling, and whether a cart ever appears. A doubtful visit is held rather than thrown away, and if that visitor goes on to act like a real person, the whole funnel is released and reported retroactively. Purchases are never held back while any of this is decided. Apple iCloud Private Relay and corporate VPN egress ranges are recognised as real people, not as datacenters. Safari visitors stay attributable for 90 days, not 7. The cookie is written by the server, so Safari’s seven-day cap on script-written cookies stops resetting the visitor every week. Your orders are counted once, not twice. The same event ID goes out browser-side and server-side within Meta’s 48-hour deduplication window, so each platform matches them up instead of double-counting. A browser event that falls outside the window is suppressed rather than sent as a second conversion. You keep your analytics when a visitor declines cookies. The event still goes through for counting, with personal details stripped out first. Five consent platforms are recognised automatically — CookieYes, Cookiebot, Complianz, iubenda and Termly — and a filter covers anything else, including OneTrust, Usercentrics and hand-rolled banners. Built like infrastructure, not like a tracking snippet Nothing is lost when a platform has a bad minute. Events queue and retry per platform: if Meta accepts an event and Pinterest times out, only Pinterest is retried. Dispatch runs on Action Scheduler rather than WP-Cron, so a stalled queue is visible and recoverable instead of silent. Built for shared hosting. Counters are incremented atomically in SQL rather than read-modify-written, so overlapping requests cannot lose each other’s work. The bot blocklist is stored as roughly 10,000 pre-computed numeric ranges queried through a database index, not as a text list parsed on every request. The REST endpoint is not an open door. Events are signed with a rotating HMAC token, nonce-verified where a form is involved, and rate-limited per IP — with the limiter backed by a database table so it still works on hosts with no object cache. A bundled GTM template gets your browser-side tags running in minutes. 29 tags, 11 triggers and 15 variables covering GA4, Meta Pixel, TikTok Pixel and Google Ads, with Enhanced Conversions and Conversion Linker already attached — normally an afternoon of manual GTM work. A written manual is included for anyone who would rather build it by hand. You can see exactly what was sent, and undo a bad exclude. The Event Log shows the identity parameters that went out with each event and the platform’s own response. Its By-IP view groups repeat traffic together, flags real buyers so you don’t accidentally exclude them, and excludes a confirmed bot in one click. Page caching stays on. Works with LiteSpeed, WP Rocket, Varnish and Cloudflare full-page cache. Queue health is visible from your WordPress dashboard. A widget shows backlog size, the oldest pending event, and when the last dispatch succeeded, so a stuck queue doesn’t go unnoticed. The bot blocklist maintains itself. Ranges for nine cloud providers ship with the plugin and refresh daily in the background. You can add your own, exclude any rule you disagree with, and download the active list as plain text. Test before you trust it. Send a test event to Meta or TikTok from the settings page and watch it arrive in Events Manager, with test-event codes handled for you. Privacy work is already done. The plugin registers with WordPress’s personal-data export and erasure tools, contributes its own section to the privacy policy WordPress generates for you, and stores IP addresses only as salted hashes. What this plugin stores To match server-side conversion events to the right person, the plugin stores SHA-256 hashes of contact details a visitor provides — email, phone, name and address components — against an opaque visitor identifier. Raw contact details are never written to disk; values are hashed before storage and the hash cannot be reversed. Two first-party cookies. An opaque visitor identifier (1 year) and a Meta-format browser identifier _fbp (90 days). 180-day retention. Records are deleted 180 days after they were last seen. Filterable via mcapi_identity_retention_days. Consent-gated. Nothing is stored, and nothing already stored is read, where marketing consent has been refused. Withdrawing consent expires both cookies and deletes the stored record. Privacy tools. WordPress’s personal-data export and erasure both cover this data. Shared devices. A stored record is replaced whenever a new person identifies themselves and is deleted at logout. A second person who only browses without identifying themselves is covered by the 180-day expiry rather than by an immediate reset — worth knowing if your customers use shared or public computers. Our Philosophy This plugin is free. Not “free with limits” — just free. Every feature works, there is no pro version waiting behind a paywall, and the code is GPL, so you can read every line that touches your customers’ data. External Services This plugin connects your website to external services to send event data. Service Used: Meta Conversion API (graph.facebook.com) Purpose: To send user interaction and e-commerce event data from your server to Meta’s servers for ad performance measurement, optimization, and audience building. Data Sent: Event details (product ID, price) and user parameters (IP address, user agent, hashed email/name/phone, Facebook cookies) are sent when a user performs a key action. Service Used: TikTok Events API (business-api.tiktok.com) Purpose: Same as Meta CAPI, providing server-side conversion tracking for TikTok Ads optimization and attribution. Data Sent: Event details (product ID, price, currency) and user parameters (IP address, user agent, hashed email/phone/external_id, ttp / ttclid cookies) are sent upon user action. Optional under the merchant’s TikTok credentials — the plugin only sends to TikTok if the credentials are configured. Service Used: Pinterest Conversions API (api.pinterest.com) Purpose: Same as the Meta CAPI, providing reliable tracking for ad performance and audience building on Pinterest. Data Sent: Event details and hashed user parameters are sent upon user action. Service Used: Google Tag Manager (googletagmanager.com) Purpose: To load a JavaScript container from Google’s servers that allows you to manage and deploy marketing and analytics tags. Data Sent: The plugin provides your GTM Container ID to Google to fetch the correct script. GTM itself may collect data based on how you configure your tags. Service Used: Cloud-provider IP range list — raw.githubusercontent.com/rezmoss/cloud-provider-ip-addresses Purpose: Used by the optional Datacenter IP filter to keep the bot blocklist current. Daily background fetch downloads CIDR ranges for AWS, Google Cloud, Azure, Cloudflare, DigitalOcean, Linode, Vultr, Oracle Cloud, and Fastly so events from those ranges can be filtered out before reaching Meta / Pinterest / TikTok. Data Sent: None. The plugin only downloads public IP-range manifests; no visitor data is sent to GitHub. License: Source repository is CC0-licensed. Service Used: Apple iCloud Private Relay egress IP list — same raw.githubusercontent.com/rezmoss/cloud-provider-ip-addresses source (folder apple_private_relay/) Purpose: Used by the optional Datacenter IP filter to whitelist real Apple visitors who exit through Apple’s relay infrastructure. Daily background fetch downloads the merged CIDR list so iOS Safari users on Private Relay aren’t mistaken for datacenter bots. Data Sent: None. The plugin only downloads the public manifest; no visitor data is sent. Shared hosting note. Some restrictive shared hosts block outbound HTTPS by default. If event delivery silently fails after install, ask your host to whitelist the following domains for outgoing connections: graph.facebook.com, business-api.tiktok.com, api.pinterest.com, and raw.githubusercontent.com (only needed if you keep “Auto-fetched” enabled on the Blocked Traffic tab — covers both the datacenter blocklist and the Apple Private Relay whitelist). Disclaimer This plugin is an independent, community-driven implementation of server-side Conversions API protocols. It is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc., TikTok Ltd., Pinterest, Inc., Google LLC, Automattic Inc., or any other trademark holder referenced herein. “Meta”, “Facebook”, and the Meta Pixel are trademarks of Meta Platforms, Inc. “TikTok” is a trademark of TikTok Ltd. “Pinterest” is a trademark of Pinterest, Inc. “Google Tag Manager”, “Google Ads”, and “GA4” are trademarks of Google LLC. “WooCommerce” is a trademark of Automattic Inc. All trademark references are used solely for descriptive interoperability purposes — to indicate which platforms this plugin can transmit data to under the merchant’s own configured credentials. No user data is transmitted to any external service until the merchant explicitly configures their own platform credentials in the plugin settings. The plugin does not “phone home” or contact any developer-controlled server. The only outbound HTTP calls are: (1) merchant-configured CAPI endpoints, (2) the public CIDR manifests at raw.githubusercontent.com used by the optional Datacenter IP filter — no visitor data is sent in those manifest fetches.

Pixelavo – Pixel Tracking & AI Ad Tools for WordPress Pixelavo helps you install and manage Facebook Pixel (Meta Pixel) on your WordPress site. It combines two main capabilities: 1. Pixel Tracking & Conversions API: Set up Facebook Pixel tracking with support for the Conversions API (server-side tracking). Track visitor interactions such as page views, purchases, add-to-cart actions, form submissions, and more. Server-side tracking via the Conversions API helps maintain tracking accuracy even when browser-based methods are blocked by ad blockers or privacy settings. Pixelavo supports both WooCommerce and Easy Digital Downloads stores. 2. AI-Powered Ad Tools: Pixelavo includes two AI tools that run in your WordPress dashboard: – AI Ad Copy Generator: Input your product details, target audience, and campaign objectives to generate multiple variations of ad text, headlines, and descriptions. Supports tone adaptation (professional, casual, urgent, luxury) and campaign-specific optimization. – AI Marketing Consultant: A chat-based interface for Facebook advertising questions. Ask about campaign setup, targeting strategies, pixel troubleshooting, budget allocation, and more. Conversation history is saved so you can pick up where you left off. – Multiple AI Models: Choose from OpenAI (GPT-3.5, GPT-4, GPT-5) or Google Gemini models depending on your preference and budget. How AI features work: Pixelavo connects to OpenAI or Google Gemini using your own API key (BYOK — Bring Your Own Key). There is no subscription fee for the AI features — you pay the API provider directly based on your usage. No credit card is required by Pixelavo itself. Get Pro Features | Documentation | Support Who Is Pixelavo For? E-commerce store owners using WooCommerce or Easy Digital Downloads who need Facebook Pixel tracking Digital marketers managing Facebook ad campaigns who want AI-assisted ad copy creation Small businesses looking to set up conversion tracking and server-side events Agencies managing Facebook Pixels across multiple client sites (Pro) Beginners who want guided help with Facebook advertising through the AI consultant Key features: WordPress integration: Pixelavo integrates with WordPress, allowing you to implement the Conversions API and server-side tracking on your website. Event tracking: With Pixelavo, businesses can track a variety of events on their website, including purchases, leads, pageviews, and more. This data can be used to optimize Facebook advertising campaigns and improve targeting. Custom event tracking: In addition to standard events, Pixelavo allows businesses to track custom events, such as button clicks, form submissions, or any other actions that are valuable to their business. Automatic event matching: Pixelavo automatically matches events on the website to the corresponding events in Facebook Ads Manager, making it easy to track conversions and optimize campaigns. Real-time event tracking: Pixelavo provides real-time event tracking, allowing businesses to quickly see how users are interacting with their website and make data-driven decisions about their advertising campaigns. Exclude Roles: Exclude members of your team to ensure your Pixel data remains accurate. You can exclude specific WordPress user levels, such as Admins, Editors, and Contributors. Product Feed: Generate Dynamic Product Ads and Custom Audiences feeds for Facebook ad targeting. Create Custom Events: Define custom events to track specific activities on your site, including page visits, button clicks, and link interactions. AI Ad Copy Generator: Generate Facebook ad copy using AI. Input your product details, target audience, and campaign objectives to get multiple variations of primary text, headlines, and descriptions. Supports OpenAI (GPT-4/GPT-5) and Google Gemini models with tone adaptation (professional, casual, urgent, luxury) and campaign-specific settings. AI Marketing Consultant: Chat-based Facebook advertising guidance in your WordPress dashboard. Ask questions about campaign optimization, targeting strategies, pixel setup, conversion tracking, and advertising best practices. Includes persistent chat history. Powered by OpenAI or Google Gemini. AI Features: AI Ad Copy Generator: Input your product details, target audience, and campaign objectives to generate 3 variations each of: – Primary text tailored for your campaign objective (awareness, traffic, conversions, or retargeting) – Headlines for your ad creative – Descriptions to complement the headline – Optimization tips based on your inputs AI Marketing Consultant: Ask questions about: – Campaign optimization strategies – Audience targeting – Pixel setup and troubleshooting – iOS 14.5+ tracking solutions – Budget optimization and scaling – Creative testing strategies Both AI features support OpenAI (GPT-3.5/GPT-4/GPT-5) and Google Gemini models. API keys are stored with AES-256-CBC encryption. Requires your own API key from OpenAI or Google. Available Events: Pixelavo supports tracking of numerous Facebook pixel events, including: View Content View Category Search Remove From Cart Add To Cart [Pro] Initiate Checkout [Pro] Purchase [Pro] Refund [Pro] Subscription [Pro] (SubscriptionCreated, SubscriptionRenewed & SubscriptionCancelled) Customize Product (WooCommerce Only) [Pro] PageScroll TimeOnPage FormSubmission (Fluent Forms, Contact Form 7, WPForms & HT Contact Form) Download CompleteRegistration Login TelClick InternalLinks [Pro] ExternalLinks [Pro] Video (YouTube, Vimeo & SelfHosted) [Pro] Integrations: WooCommerce: Integrates with WooCommerce to track key events like purchases, add-to-cart actions, and product views. Supports both browser-side pixel and server-side Conversions API tracking for WooCommerce stores. Easy Digital Downloads (EDD): Supports Easy Digital Downloads to track Facebook Pixel events and conversion data. Integrates with Facebook’s Conversions API for server-side tracking of digital product purchases and downloads. Quick Setup: Install and activate Pixelavo Add your Facebook Pixel ID Optionally add an API key from OpenAI or Google for AI features Configure events and start tracking Tutorials: How to Setup Facebook Pixel on WordPress Using Pixelavo Plugin https://www.youtube.com/watch?v=4pGyczp2XD4 How to Setup Facebook Custom Events by Pixelavo Facebook Pixel WordPress Plugin https://www.youtube.com/watch?v=Krn5M2JdIRg Security: AES-256-CBC encryption for API keys Data stays on your WordPress site No third-party data sharing for tracking data AI queries are sent directly to your chosen provider (OpenAI/Google) — Pixelavo does not proxy or store your conversations Pro Features: Upgrade to Pro for advanced tracking and optimization features: Multiple pixel support: Add multiple Facebook Pixels to track data across different ad accounts or campaigns. Advanced WooCommerce Events: Track purchases, add-to-cart, initiate checkout, and more e-commerce events. Advanced EDD Events: Full Easy Digital Downloads integration with purchase tracking. Exclude Bouncing Visitors: Time delay settings to prevent bouncing visitors from triggering events. Advanced Matching: Send additional customer information to improve attribution accuracy. Additional user information: Include referrer, language, categories, and tags as event parameters. Additional Purchase Information: Track coupon usage and shipping details for better audience targeting. Premium Events: Video tracking, internal/external links, subscription events, and more. Facebook Conversions API Facebook Conversions API (formerly known as the Server-Side API) is a tool that allows businesses to send their website or app conversion data directly to Facebook’s servers, bypassing the need for browser-based tracking methods like the Facebook Pixel. Using the Conversions API, businesses can track actions such as purchases, sign-ups, and other valuable events that occur on their website or app. This data can then be used to optimize Facebook advertising campaigns, such as retargeting ads to users who have already taken specific actions on the business’s website or app. Some benefits of using Facebook Conversions API include: Helps improve tracking accuracy: By bypassing the need for browser-based tracking, businesses can ensure that all conversion data is captured accurately, even if a user’s browser settings or ad-blocking software prevent the Facebook Pixel from tracking their actions. Increased privacy: Because the Conversions API sends data directly to Facebook’s servers, businesses can reduce the amount of user data that is shared with third-party trackers, potentially improving user privacy and security. Greater control: The Conversions API allows businesses to track and send custom data points to Facebook, giving them greater flexibility and control over how they track and optimize their advertising campaigns. Helps reduce potential data loss: Because the Conversions API relies on server-to-server communication, rather than browser-based tracking, businesses can reduce the risk of data loss due to issues like browser crashes or network outages. Overall, the Facebook Conversions API can provide businesses with a more accurate, flexible, and privacy-focused way to track and optimize their Facebook advertising campaigns. Need Help? Is there any feature that you want to get in this plugin? Needs assistance to use this plugin? Feel free to Contact us External Services This plugin connects to several third-party services to provide enhanced functionality. Below are the services used and the data transmitted: HasThemes Feed Service Purpose: Used for fetching and displaying plugin notices, announcements content within the WordPress admin dashboard. When: During plugin activation, admin dashboard visits, and periodic checks for new notices (cached for 2 days). Service Provider: HasThemes Terms and Conditions: https://hasthemes.com/terms-conditions/ Privacy Policy: https://hasthemes.com/privacy-policy/ Diagnostic Data Webhook Purpose: Used for sending diagnostic data when users opt-in to help improve plugin compatibility, performance and inform client for any critical issues. Data Sent: Complete diagnostic information including site details, admin email, admin name, server configuration, WordPress setup, theme information & plugin lists. When: Only when users explicitly agree to share diagnostic data through the admin notice. Service Provider: Pixelavo / HasThemes (we operate this webhook on our own infrastructure; all domains are owned by us) Terms and Conditions: https://pixelavo.com/terms-conditions/ Privacy Policy: https://pixelavo.com/privacy-policy/ Google Base Namespace Purpose: Used for generating product feeds compatible with Google Shopping, Google Merchant Center, and other services that support Google’s product feed format. Data Sent: Product information including names, prices, descriptions, categories, images, availability, and attributes from your WooCommerce/EDD store. When: When generating product feeds via the feed URLs (yoursite.com/feed/pixelavo or yoursite.com/feed/pixelavo-edd). Service Provider: Google (namespace specification only – no data sent directly to Google) Terms of Service: https://policies.google.com/terms Privacy Policy: https://policies.google.com/privacy Data Privacy Notice Diagnostic data collection is completely optional and requires explicit user consent through an admin notice. No personal user data is transmitted without explicit consent. All data transmission occurs over secure HTTPS connections. Users can decline data sharing without affecting plugin functionality. The plugin works fully without connecting to external services. Legal Compliance By using this plugin, you acknowledge that data may be transmitted to the above-mentioned third-party services only when you explicitly consent to diagnostic data sharing or when generating product feeds.