First-Party Data Ad-Conversion Optimization System
Your data. Your conversions. Your ROI.
Recover conversions lost to Safari and cookie limits. Increase ad ROI/ROAS in 1 week.
A server-side tracking + Conversions API system, deployed entirely in your own cloud — so the conversions browsers silently drop still reach your ad platforms, and your ad data never leaves your perimeter.
Increase your ads ROI/ROAS in 1 week · 20 minutes · No credit card · No sales pressure
Trusted by advertisers across 14 markets · APAC + N. America + UK
- BYOC
- Bring Your Own Cloud
- Increase ROI/ROAS in 1 week
- Cookie-resilient
- iOS 18 / ITP-safe
- 14 markets · APAC + N. America + UK
- Data sovereignty by design
- PII SHA-256 by default
- sGTM
- Meta CAPI
- TikTok Events API
- LINE CAPI
- Google Ads CAPI
- LinkedIn Conversions API
Markets covered · APAC + N. America + UK
Lines of defence
Ad platforms supported
Data stays in your cloud
You're backed by a real engineering team
No call-centre scripts and no bots. A multilingual solutions-engineering team that knows your market looks at your tracking stack with you and replies within one business day — your data never leaves your cloud.
How ad signals flow through sGTM + Meta CAPI in your cloud
Browser captures ad signals → your sGTM container in your own cloud orchestrates → Meta CAPI / TikTok Events API / LINE CAPI ad platforms receive only what they need — hashed, deduplicated, routed.
Deploy on the cloud you already trust
BYOC runs on Google Cloud, AWS, Microsoft Azure, or your private cloud — same business model, same technology, the same fifteen lines of defence. Pick the cloud where your data must legally reside, or the one your team already operates.
- Google CloudCloud Run · Firestore · BigQuery
- AWSECS / Fargate · DynamoDB · Redshift
- Microsoft AzureContainer Apps · Cosmos DB · Synapse
- Private / On-PremKubernetes · PostgreSQL · ClickHouse
A portable, container-based architecture: your ad data never leaves your perimeter, on whichever cloud you choose.
15 sequential safeguards 5 defence stages
Fifteen lines of defence
From sGTM ad-signal capture through Meta CAPI / TikTok Events API / LINE CAPI ad-conversion dispatch to ad-data retention — every stage hardened, observable, and yours to govern.
First-party signal capture
Capture fbp / fbc / ttclid / line_uuid / gclid on your own subdomain — first-party signals survive Safari ITP's 7-day cookie cap and most ad-blockers, so fewer ad clicks go untracked.
Identity bridge
Bridge anonymous_id ↔ member_id with a 30-day rolling lookup — identity persists through login, so returning buyers stay attributed instead of being counted as brand-new.
Repair on the fly
Missing fbp / fbc on a conversion? We backfill from up to 30 days of history before the event leaves your edge — recovering conversions that would otherwise report as unattributed.
Event-ID dedup
One event_id per event — browser pixel + server CAPI are designed not to double-count, so FB Events Manager shows ‘Deduplicated’ and your ad ROI/ROAS reflects real sales, not inflated duplicates.
Pixel routing
Full-fanout, ratio split, event-based and time-based switching — route one event stream to 5+ ad platforms with zero re-tagging.
Data sovereignty
A managed document store + data warehouse inside your own cloud — Firestore + BigQuery on Google Cloud, DynamoDB + Redshift on AWS, or Cosmos DB + Synapse on Azure. All of your ad data stays in your cloud, your region — by architecture. Direct SQL access, no vendor lock-in.
PII at rest = SHA-256
Email and phone are SHA-256 hashed before they ever touch your data warehouse — plaintext PII is not stored — it is hashed by design — across all 14 market regimes.
Modular by design
Pause the worker, fetch from the DB by hand, fire CAPI manually — every one of the 15 stages is replaceable. No black box, no lock-in.
Verified routes
Scheduled ingress routes pass OIDC + audience verification on every invocation — helping prevent spoofed or accidental conversion replays from hitting your ad accounts.
CRM-augmented match rates
Upload member_id / email / phone — we hash and attach them automatically. Richer identifiers raise CAPI match quality, so more conversions can be attributed and your effective CPA can improve.
Audience automation
Condition-scan triggers automatic CAPI replays for missed conversions — audiences stay complete without a single manual export.
Retention you control
730-day default retention with auto-purge across your warehouse + document store — tune it to the day per regulatory regime.
Observability built-in
Per-event success / permanent-failure metrics, Worker-bypass mode and a structured error_kind taxonomy — every dispatch to 5+ ad platforms is auditable.
Consent across 14 regimes
Cookie banner with server-verified consent re-prompts every 30 days; lawful basis routed across all 14 markets — APPI / PIPL / PDPA / GDPR Art.6(1)(f) per jurisdiction.
Forensic audit trail
Every login, mutation and event tagged with actor / IP / UA / Cloudflare ray_id — 365-day forensic retention, super-admin-only IP intel dashboard.
Fourteen markets, one platform
Pre-tuned regulatory templates, native ad-platform integrations, and locale-aware compliance — ready on day one.
Fourteen ad markets · APAC + North America + United Kingdom · day one
Each market ships with its own regulatory templates, language localization, and ad-platform tuning.
Trusted across 14 markets · APAC + N. America + UK
Logos shown are illustrative pending customer publication permission.
Frequently asked questions
The questions buyers and new learners ask most — answered in plain language. Missing yours? Reach out.
-
What is server-side Google Tag Manager (sGTM), and why does it matter?
Normally your website runs its tracking tags inside the visitor's browser — but browsers (especially Safari) and ad-blockers increasingly block them, so ad clicks and sales get lost and your reported ROI looks worse than reality. Server-side GTM moves that tracking work to a server you control instead, so fewer signals are blocked. When it runs on your own first-party subdomain, requests look first-party rather than third-party, which makes them far more resilient to Safari ITP, Firefox ETP, and ad-blockers — and the data lands in your own cloud, not a vendor's. -
Why do online ad campaigns 'lose' conversions in the first place?
A growing share of real purchases never make it back to the ad platform, so it looks like your ads worked less well than they actually did. The usual causes are Safari's Intelligent Tracking Prevention (ITP), which caps script-written browser cookies at 7 days; browsers blocking third-party cookies; ad-blockers stripping out the tracking script; and visitors declining analytics consent. The sale still happened — the platform just never heard about it, so it can't credit your ad or learn from it. -
What is a Conversions API (CAPI), and how is it different from the old pixel?
A pixel is a small piece of JavaScript that runs in the visitor's browser and reports events like 'Purchase' to the ad platform. A Conversions API (CAPI) does the same job, but server-to-server — your own server sends the event straight to the platform's API instead of relying on the browser. Because it doesn't depend on browser cookies or scripts loading, CAPI keeps reporting conversions the pixel alone would have dropped. -
What's the difference between server-side and client-side tracking?
Client-side (browser-side) tracking runs in the visitor's browser, where ad-blockers, cookie limits, and tracking-prevention can interfere with it. Server-side tracking moves that work to a server you control, which then forwards clean, deduplicated events to the ad platforms. The browser only sends the event once, to your own domain — everything fragile and easily blocked moves off the browser and onto infrastructure you govern. -
If I use a Conversions API, do I still need the browser pixel?
Yes — the recommended setup runs the browser pixel and server-side CAPI together, not one instead of the other. The pixel captures rich browser context and fires fast, while CAPI fills the gaps the pixel misses, so together they recover far more conversions than either alone. The two are tied together with a shared event ID so the platform does not count the same sale twice — that's what deduplication handles. -
What is event deduplication, and why does it matter?
When the same conversion is reported twice — once by the browser pixel and once by the server CAPI — the platform needs to know it's a single sale, not two. Deduplication solves this by tagging both reports with the same unique event_id, so the platform keeps one and discards the duplicate. Without it your numbers inflate; with it, Meta's Events Manager simply shows the event as 'Deduplicated'. -
What are fbp, fbc, and click IDs — and why do they go missing?
They're small identifiers that link a visitor back to the ad they clicked: fbp identifies the browser, fbc carries Meta's click ID from the ad URL, and other platforms have their own (gclid for Google, ttclid for TikTok). They live in cookies, so when Safari ITP expires the cookie or a visitor clears their browser, the link breaks and the conversion can no longer be attributed to the ad. A server-side setup can store these for a window of time and backfill them onto a later conversion, rescuing attribution that would otherwise be lost. -
What does BYOC mean, and why does keeping data 'in your own cloud' matter?
BYOC stands for Bring Your Own Cloud — the tracking system is deployed inside a cloud account you own (Google Cloud, AWS, Azure, or private), not on a vendor's servers. That means your raw ad and customer data never leaves your perimeter: you choose the region, set the retention period, and query the data directly, with no vendor lock-in. For regulated industries, 'the data physically stays with us' is often the difference between a deployment a regulator accepts and one it doesn't. -
Does recovering lost conversions actually improve ROI/ROAS — and how?
Return on ad spend can only count conversions the platform actually receives, so recovering dropped conversions does two things. First, your reported ROI/ROAS reflects sales that were always real but previously invisible. Second — and more durably — the ad platform's optimisation algorithm gets a more complete signal of who really converts, so it targets and bids more accurately over time. The lasting gain comes from that better signal, not just a one-off reporting bump. -
Does sending conversions server-side violate user privacy?
It doesn't have to, and a well-built setup is designed not to. Personal data like email and phone is SHA-256 hashed before it is stored or sent — hashing is a one-way transform, so the platform can match it without ever receiving the plaintext — and consent choices are checked before any event is dispatched. The goal is accurate measurement of data you already collected, not collecting more about people or keeping identifiable details you shouldn't. -
Will this conflict with my existing GA4 or Google Tag Manager?
No — server-side GTM sits alongside what you already run rather than replacing it. Your existing web GTM container and GA4 keep working in the browser; the server-side container is a separate destination that receives events and forwards conversions to the ad platforms, and GA4 can even be routed through it for more resilient analytics. Nothing about your current tagging has to be torn out to add a server-side layer. -
How quickly will I see results, and how do I measure them?
Once events flow, the first place to look is the ad platform's event-quality view — Meta's Events Manager, for example — where deduplicated server events should appear alongside browser events within days. The clearest measure is the lift in attributed conversions and Event Match Quality versus your pixel-only baseline, so it helps to record that baseline before you start. Treat the reported ROI/ROAS change as the headline and the richer optimisation signal as the longer-term payoff. -
How is TopAdsROI different from Stape, Addingwell, or gtmserver.com?
Those are good hosted solutions, but they store your data on their infrastructure. TopAdsROI deploys into your own cloud — Google Cloud, AWS, Azure, or private — with the document store and data warehouse in your project (Firestore + BigQuery on GCP, or equivalents on AWS / Azure), so you get direct query access, your own retention policy, and your own region. We also pre-model 14 markets across APAC, North America, and the UK — each with its own privacy regime — while the others ship a generic platform. -
Where is customer data stored?
Inside your own cloud — Google Cloud, AWS, Azure, or private — in the region you choose (for example Sydney, Tokyo, or Singapore for APAC, US regions for North America, or London for the UK). Email and phone are SHA-256 hashed before they reach your data store, so plaintext personal data is not persisted by design. -
Which ad platforms do you support?
Day one: Meta Conversions API (CAPI), TikTok Events API, LINE Conversion API, Google Ads (via the Google Ads API / Enhanced Conversions), and LinkedIn Conversions API. And because TopAdsROI is BYOC, platform support is fully customizable — we can build a server-to-server integration for any destination that genuinely offers a Conversions / Events API (for example Microsoft/Bing, Snap, Pinterest, Reddit, and X), configured to your stack on request. The only boundary is honesty: we integrate platforms that provide a real server-side conversion endpoint, not browser-pixel-only channels. -
Do you support LINE Conversion API?
Yes — natively. LINE is a primary channel in Japan, Taiwan, Thailand, and Singapore, so we built first-class LINE Conversion API integration alongside Meta and TikTok. -
Do you support native iOS / Android app conversions?
TopAdsROI BYOC is a server-side web / H5 product: it recovers web conversions lost to Safari ITP and cookie limits through your own sGTM + CAPI — no app SDK is involved or required for that. If you also need native in-app conversions (iOS / Android / React Native / Flutter) forwarded to the ad-platform CAPIs, our sibling product topadroi.com ships those SDKs as a server-side signal forwarder (not an MMP — it does not do SKAdNetwork attribution). Run it alongside your MMP, or ask us and we will point you to the right fit. -
Do I need engineers or a DevOps team to use this?
For the BYOC model (this site), some cloud and DevOps capacity helps, because you're running a container and data warehouse in your own cloud — though deployment is a guided engagement, not a do-it-yourself project. If you don't have that capacity, our sibling managed product at topadroi.com runs the same sGTM + CAPI stack on Cloudflare's edge with no cloud setup, no Terraform, and no DevOps. You can compare the two side by side at /compare/. -
Can we migrate from SaaS to BYOC later (or vice versa)?
Yes — both products share the same regulatory templates and feature parity at the CAPI layer. Migration is a configuration export plus re-deployment in your target environment. A common path is to start on SaaS (topadroi.com) to validate channel coverage and ROI, then graduate to BYOC when scale, regulator pressure, or audit posture calls for data sovereignty. Ask us for the migration playbook. -
How is TopAdsROI deployed, and how long does it take?
A typical pilot runs 5–10 business days from kickoff to the first event flowing through your edge, depending on scope. A full multi-platform rollout (Meta + TikTok + LINE + Google + LinkedIn) usually completes within about 30 days. Timelines vary with the number of platforms and markets in scope. -
Can we self-host on our own cloud?
Yes — that's the default deployment model. We deploy into your own cloud (Google Cloud, AWS, Azure, or private) so the data never leaves your perimeter, and we retain operational responsibility under a Data Processing Addendum. -
How do you comply with the Australian Privacy Act reform?
Our policy template aligns with the Australian Privacy Principles (APP), the Notifiable Data Breach (NDB) scheme, and the new automated-decision-making transparency duty (APP 1.7, in force 10 December 2026). Your DPO inherits a working template instead of starting from a blank page. -
How do you comply with Japan's APPI?
We honour APPI's third-party-provision and personally-referable-information consent rules from the 2022 amendment, and the external-transmission notification rules under the amended Telecommunications Business Act (in force June 2023). Cross-border transfer disclosures are pre-drafted in Japanese. -
What is the SLA?
Availability is governed by the SLA we agree with each customer, not a blanket public promise — we are able to target levels such as 99.9% for our edge and orchestration layer, with the exact commitment set out in your order form. A Workers-bypass mode also lets your ops team manually replay events from your data store if any link in the chain degrades. -
How is pricing determined?
Pricing is calibrated to four variables: monthly event volume, number of active markets, ad platforms in scope, and data-residency choice. Three commercial models are available — pay-as-you-go, subscription, or perpetual buyout. Talk to us for a tailored quote. -
Is there a managed version if we don't have a cloud account or DevOps?
Yes — our sibling product at topadroi.com runs the same sGTM + multi-platform CAPI stack on Cloudflare's edge. Same 15 lines of defence, no cloud setup, no Terraform, no DevOps. 9 verified-live ad-platform CAPIs on day one (Meta, TikTok, Google Ads, GA4, X, Snap, Pinterest, Reddit, LinkedIn), with more in beta; the free tier covers 100K events/month with no credit card. Choose BYOC (this product) when you want data inside your own cloud; choose managed SaaS when speed and zero infrastructure matter more. Compare side by side at /compare/. -
What happens if we cancel?
You keep your cloud and all the data in it — it never lived anywhere else, so there is nothing for us to return. We revoke deployment-support access within 48 hours and hand you a decommission checklist. No vendor lock-in.
See your ad tracking like you've never seen it before
Free 20-min conversation — a live walkthrough of your ad-tracking stack. And because it all runs inside your own cloud, leaving carries zero data-export risk: every event, identity and config stays queryable in your cloud.
Free 20-min chat · No credit card · No obligation
