DataFirefly Server-Side
| 开发者 | datafirefly |
|---|---|
| 更新时间 | 2026年7月14日 04:05 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
DataFirefly Server-Side delivers complete, reliable WooCommerce conversion tracking with a single connection key:
- Full funnel — page view, product view, add to cart, initiate checkout, add payment info, purchase.
- Dual delivery, deduplicated — every event fires a light client pixel (Meta / GA4 / TikTok) and a signed server-side event sharing the same event id, so ad blockers never cost you a conversion and nothing is ever counted twice.
- Per-destination control — enable or disable the Meta, GA4 and TikTok client tags individually. A disabled destination's third-party script (and its cookies) is never loaded in your visitors' browsers.
- Consent-first (GDPR) — with "Require consent" on (the default), nothing fires and nothing is sent — client-side or server-side — until the visitor explicitly grants marketing consent (DataFirefly Cookie Consent, WP Consent API, Complianz, Cookiebot, IAB TCF v2). This includes the server-side purchase event: the consent decision is captured at checkout and enforced even when the purchase confirmation arrives later from a payment gateway.
- Reliable — failed sends are queued and retried with exponential backoff; an Activity panel shows delivery status live.
- Secure by design — no destination credential ever reaches the browser; the HMAC secret never leaves the server; the public beacon endpoint is rate-limited, size-capped and strictly sanitized; purchase events are server-authoritative and cannot be spoofed.
安装:
- Upload the plugin and activate it. At this point the plugin does nothing and sends nothing.
- Go to Settings → DataFirefly Server-Side.
- Paste the connection key from your DataFirefly client space and click Connect. That is the only step.
- Optional: in the same screen, untick any client destination (Meta, GA4, TikTok) you do not use.
常见问题:
Does the plugin send any data before I connect it?
No. Until you paste your DataFirefly connection key and click Connect, the plugin loads no third-party script and sends no data anywhere.
Does the plugin load Facebook / TikTok / Google scripts on my shop?
Only for the destinations that are both configured on your DataFirefly account and enabled in the "Client destinations" setting. Untick a destination and its script will never be injected.
Is visitor consent respected?
Yes. When "Require consent" is on (the default), no tag is injected and no event is sent — including the server-side purchase event — until the visitor explicitly grants marketing consent, with live re-check when the visitor accepts. The consent decision is captured at checkout and stored on the order, so a purchase confirmed later by a payment gateway webhook still honours it. With "Require consent" on and no explicit grant (including when no consent banner is installed), the purchase event is simply not sent, and an order note tells you why.
Which consent tools are supported?
DataFirefly Cookie Consent, the official WP Consent API, Complianz, Cookiebot, and IAB TCF v2-compatible banners.
更新日志:
2.2.2
- Security: the thank-you-page tracking context now enforces the same authorization as WooCommerce's own order-received template — the order key (or being logged in as the order's customer) is required before any order detail (products, total, order number) is exposed to the page. A guessed order-received URL no longer reveals anything.
- Privacy: the server-side purchase flow now strictly enforces end-user opt-in consent when "Require consent" is enabled — the visitor's consent decision is captured at checkout, stored on the order and honoured even when the purchase fires later from a gateway webhook; without an explicit grant, no personal or order data is sent.
- Privacy: Complianz and Cookiebot consent cookies are now also read server-side as a defense-in-depth signal.
- Docs: added the "External services" disclosure (DataFirefly dispatcher, Meta Pixel, GA4 gtag.js, TikTok Pixel) with links to each service's terms and privacy policy.
- i18n: the text domain now matches the plugin slug (datafirefly-server-side).
- New: per-destination client-tag toggles (Meta, GA4, TikTok) — a disabled destination's script is never loaded.
- Fix: coding-standards and Plugin Check compliance pass (i18n translators comments, input sanitization, no unprefixed globals).
- New: merchandising events (view_item_list, select_item, view_promotion, select_promotion).
- Full-funnel client tracking layer with dedup-perfect server-side delivery, retry queue and Activity panel.
- Server-side purchase event delivery.