capiflow

<p><strong>CapiFlow</strong> sends supported WooCommerce events from your server to Meta’s Conversions API (CAPI) — helping reduce the impact of browser-side tracking limitations like ad blockers, Safari ITP, and Firefox ETP.</p>
<h4>Why Server-Side Tracking Matters</h4>
<p>When the Meta pixel is blocked, event data may not reach Meta — affecting ad optimization. CapiFlow complements the browser pixel by sending events server-side with a matching <code>event_id</code> for deduplication.</p>
<h4>How It Works</h4>
<ol>
<li><strong>Install & Activate</strong> — Setup wizard launches automatically</li>
<li><strong>Enter Pixel ID + Access Token</strong> — From Meta Events Manager</li>
<li><strong>Click Test Connection</strong> — Events start flowing</li>
</ol>
<p>No theme edits. No GTM server container required. No separate server-container subscription needed for the built-in Meta CAPI workflow.</p>
<h4>Core Features</h4>
<p><strong>Server-Side Event Tracking</strong></p>
<ul>
<li>🎯 <strong>7 Standard Events</strong> — Purchase, InitiateCheckout, AddPaymentInfo, AddToCart, ViewContent, Search, PageView</li>
<li>🔄 <strong>Deduplication</strong> — Browser pixel and server events share the same <code>event_id</code> to support Meta’s deduplication</li>
<li>🛡️ <strong>First-Party Event Endpoint</strong> — Browser events can be delivered through your own domain where configured</li>
<li>🔐 <strong>SHA-256 PII Hashing</strong> — Email, phone, name hashed before leaving your server</li>
</ul>
<p><strong>Event Match Quality Support</strong> — <code>fbc</code>, <code>fbp</code>, <code>external_id</code>, client IP, user agent, and hashed customer data (email, phone, name) for logged-in users.</p>
<p><strong>Analytics & Monitoring</strong></p>
<ul>
<li>📈 Dashboard — event breakdown and source attribution</li>
<li>🔍 Debug console — payloads and Meta API responses</li>
<li>🏥 System health — token, queue, connection test</li>
<li>🛒 Cart monitor — abandoned cart summary</li>
</ul>
<p><strong>Data Quality & Control</strong></p>
<ul>
<li>📞 Phone validation at checkout</li>
<li>🔒 COD Purchase gate — hold events until admin confirms</li>
<li>📋 Order metabox and columns — per-order CAPI status</li>
</ul>
<p><strong>Developer Tools</strong></p>
<ul>
<li>🔧 Code injection — GTM, analytics, chat widgets (admin-only)</li>
<li>🪝 Filter hooks — <code>capiflow_proxy_url</code>, <code>capiflow_has_tracking_consent</code></li>
<li>📦 HPOS compatible — WooCommerce High-Performance Order Storage support</li>
<li>⏱️ Action Scheduler queue — async event delivery with retry logic</li>
</ul>
<h4>CapiFlow Pro</h4>
<p>CapiFlow Pro is a separate addon that extends the free plugin with:</p>
<ul>
<li>Phone reputation scoring and fraud detection</li>
<li>Negative Purchase events for cancelled/refunded orders</li>
<li>Multi-pixel and category-based pixel routing</li>
<li>COD auto-confirm with courier integration</li>
<li>Real-time EMQ score display from Meta API</li>
<li>Blacklist management for known fraud patterns</li>
<li>Advanced order quality tools</li>
</ul>
<p>Learn more on the <a href="https://capiflowpro.com" rel="nofollow ugc">CapiFlow website</a>.</p>
<h4>Compatibility</h4>
<ul>
<li><strong>Gateways:</strong> bKash, Nagad, SSLCommerz, Stripe, PayPal, COD, and all standard WooCommerce gateways</li>
<li><strong>Themes:</strong> Any theme — Classic, Block (FSE), page builders</li>
<li><strong>WooCommerce:</strong> HPOS and legacy post-based orders</li>
<li><strong>Consent:</strong> CookieYes, Complianz, CookieBot, GDPR Cookie Consent, custom filter hook</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.0+</li>
<li>WooCommerce 7.0+</li>
<li>PHP 7.4+</li>
<li>OpenSSL PHP extension</li>
<li>Meta Pixel ID and System User Access Token</li>
</ul>
<h4>External Services</h4>
<p>This plugin connects to the following third-party services:</p>
<p><strong>Meta (Facebook) Conversions API</strong></p>
<p>CapiFlow sends WooCommerce event data to the Meta Conversions API via: <code>https://graph.facebook.com/</code></p>
<p>This connection is made from your server to Meta’s servers when a configured tracking event occurs. No data is sent until a valid Pixel ID and Access Token are configured.</p>
<p>Data transmitted includes:</p>
<ul>
<li>Hashed email, phone, first and last name (SHA-256)</li>
<li>Client IP address and Browser User Agent</li>
<li>Meta Click ID (_fbc) and Browser ID (_fbp) cookies</li>
<li>Order total, currency, and event metadata</li>
</ul>
<p>All personal data is SHA-256 hashed before transmission.</p>
<ul>
<li><a href="https://www.facebook.com/terms.php" rel="nofollow ugc">Meta Terms of Service</a></li>
<li><a href="https://www.facebook.com/privacy/policy/" rel="nofollow ugc">Meta Privacy Policy</a></li>
<li><a href="https://developers.facebook.com/terms/" rel="nofollow ugc">Meta Platform Terms</a></li>
</ul>
<p><strong>Meta Pixel JavaScript SDK</strong></p>
<p>This plugin loads the Meta Pixel SDK from: <code>https://connect.facebook.net/en_US/fbevents.js</code></p>
<p>Loaded on frontend pages when a Pixel ID is configured. The SDK is hosted by Meta.</p>
<ul>
<li><a href="https://www.facebook.com/terms.php" rel="nofollow ugc">Meta Terms of Service</a></li>
<li><a href="https://www.facebook.com/privacy/policy/" rel="nofollow ugc">Meta Privacy Policy</a></li>
</ul>
<h4>Privacy</h4>
<p>For server-side events, all personal data is SHA-256 hashed before transmission. For browser events, the Meta Pixel SDK handles hashing via Advanced Matching. This plugin does not store raw PII in its own tables. See <a href="https://www.facebook.com/privacy/policy/" rel="nofollow ugc">Meta’s privacy policy</a>.</p>
<h4>Cookies</h4>
<ul>
<li><code>cs_uid</code> — Random visitor identifier for <code>external_id</code> deduplication. 180 days. No PII.</li>
<li><code>_fbc</code> — Meta Click ID. Set by Meta SDK on ad click. CapiFlow reads/extends server-side. 180 days.</li>
<li><code>_fbp</code> — Meta Browser ID. Set by Meta SDK. CapiFlow reads/extends server-side. 180 days.</li>
</ul>
<p>All cookies are first-party and contain no personally identifiable information.</p>
<h4>Data Storage</h4>
<ul>
<li><code>{prefix}_capiflow_events</code> — Queued/sent event payloads. Auto-purged after delivery.</li>
<li><code>{prefix}_capiflow_analytics</code> — Daily aggregated analytics. Auto-purged by retention settings.</li>
<li>Order metadata with <code>_capiflow_</code> prefix. Removed on uninstall if “Keep Data” is disabled.</li>
<li>Logs in <code>wp-content/uploads/capiflow-logs/</code> with <code>.htaccess</code> protection. Auto-cleaned daily.</li>
</ul>
<h4>Consent</h4>
<p>By default, events fire once configured. Enable “Consent Enforcement” in Settings to respect CMP signals for both browser and server events.</p>
<p>Supported CMPs: CookieYes, Complianz, CookieBot, GDPR Cookie Consent. Custom integration via <code>capiflow_has_tracking_consent</code> filter.</p>
<p>When Consent Enforcement is enabled, browser and server-side events are blocked until valid tracking consent is detected.</p>
<p>Store owners are responsible for lawful consent configuration where required by privacy regulations.</p>


CapiFlow – Conversions API (CAPI) Tracking for WooCommerce

Send WooCommerce events to Meta Conversions API with server-side tracking, deduplication, and confirmed Purchase control.

Freemius

roasmetatools

<p>ROAS Tool Kits is the ultimate attribution and catalog infrastructure for modern media buyers and arbitrage marketers[cite: 2].</p>
<p>Whether you are scaling WooCommerce E-commerce or running high-volume Advantage+ Arbitrage campaigns, this plugin restores your attribution data and seamlessly generates the XML feeds Meta and TikTok need to scale your ads[cite: 2].</p>
<h4>Core Free Features</h4>
<ul>
<li><strong>Host-Native Conversions API (CAPI):</strong> Route server-side events directly through your own WordPress host[cite: 2]. No third-party servers like Stape.io or Google Cloud required[cite: 2].</li>
<li><strong>Unified Catalog Feeds:</strong> Instantly generate compliant XML feeds for Meta (Blog Posts & Products), Google Merchant Center, and TikTok Ads Manager[cite: 2].</li>
<li><strong>Meta & TikTok Core:</strong> Global tracking for PageView, ViewContent, AddToCart, InitiateCheckout, and Purchase/CompletePayment[cite: 2].</li>
<li><strong>Google Hub:</strong> One-click deployment for Google Analytics 4 (GA4), Google Tag Manager (GTM), Google Ads Remarketing, and Consent Mode v2[cite: 2].</li>
<li><strong>Dual-Routing Events:</strong> Automatically push all standard Meta Pixel events directly into GA4 and TikTok simultaneously[cite: 2].</li>
</ul>
<h4>Premium Features (PRO)</h4>
<ul>
<li><strong>[PRO] Ad-Blocker Bypass Proxy:</strong> Routes frontend JavaScript tracking data to an internal WP endpoint to completely bypass strict browser ad-blockers and recover up to 30% of missing data[cite: 2].</li>
<li><strong>[PRO] TikTok Events API:</strong> Route high-intent events server-side to TikTok using Long-Term Access Tokens for maximum attribution accuracy[cite: 2].</li>
<li><strong>[PRO] GA4 Server-Side API:</strong> Dual-routes custom events directly to Google’s servers using the Measurement Protocol API secret to restore data lost to iOS tracking restrictions[cite: 2].</li>
<li><strong>[PRO] Automatic Advanced Matching:</strong> Automatically detects logged-in WordPress/WooCommerce users, hashes their emails securely, and injects them into the Meta/TikTok pipeline to boost Event Match Quality (EMQ)[cite: 2].</li>
<li><strong>[PRO] UTM & Click ID Persistence Engine (v6.0):</strong> Bulletproof cross-session tracking[cite: 2]. Captures UTMs, <code>fbclid</code>, <code>gclid</code>, and <code>ttclid</code> to dynamically stitch them into outbound links or send them directly into CAPI server payloads[cite: 2].</li>
<li><strong>[PRO] Real-Time Feed Invalidation:</strong> Move beyond basic 12-hour caching[cite: 2]. The XML catalog instantly self-destructs the millisecond a product price changes, goes out of stock, or is moved to the trash, saving wasted ad spend[cite: 2].</li>
<li><strong>[PRO] Event Deduplication:</strong> Automatically generates and passes synchronized <code>event_id</code> hashes between the browser and server to prevent double-counting[cite: 2].</li>
<li><strong>[PRO] High-Intent Custom Triggers:</strong> Fire granular events (Scroll Depth 50/70%, Time on Site up to 5 minutes, Multi-PageViews, and Composite Triggers) to Meta, TikTok, GA4, and Google Ads[cite: 2].</li>
<li><strong>[PRO] Advanced Feed SEO:</strong> Automatically pulls Yoast SEO titles and primary categories into your XML Catalog fields[cite: 2].</li>
<li><strong>[PRO] Negative Exclusion Audiences:</strong> Server-side tracking for WooCommerce Order Refunded and Order Cancelled events[cite: 2].</li>
</ul>


ROAS Tool Kits for Meta and Google (Post & Product Catalogue + Pixel, CAPI, GA4, GAds & GTM)

Generate a WP content & product catalog for dynamic ads. Easily deploy the Meta Pixel, Conversions API, GA4, Google Ads, GTM, and the TikTok Pixel …

CapiFlow – Conversions API (CAPI) Tracking for WooCommerce vs ROAS Tool Kits for Meta and Google (Post & Product Catalogue + Pixel, CAPI, GA4, GAds & GTM)