PrestaShop 1.7.6+ module: version 1.0.1

PrestaShop server-side tracking module

Install the datafirefly_serverside module on your PrestaShop store and send the purchase conversion server-side, directly to Meta Conversions API (CAPI), GA4, TikTok, Pinterest and Microsoft Advertising. Per-shop HMAC signing, fail-safe by design so a tracking error never breaks checkout, and GDPR consent gating. A single connection key, no pixel IDs to paste into PrestaShop.

Fail-safe: checkout is never interrupted Per-shop HMAC signing EU-hosted

The module installs from a ZIP uploaded in the module manager, no FTP access required.

The flow, end to end
Your PrestaShop store datafirefly_serverside module: actionValidateOrder hook
DataFirefly dispatcher EU-hosted in Germany: HMAC-authenticated channel
Meta CAPI GA4 TikTok Pinterest Microsoft Advertising
The problem

Your PrestaShop browser tags are leaking sales

The Meta pixel, GA4 tag, or TikTok tag in your PrestaShop theme runs in the customer's browser: where it's increasingly blocked before it even gets to fire.

  • Ad-blockers

    stop the tags from loading on the order confirmation page: the purchase is never reported to your platforms.

  • Safari ITP

    and similar protections shorten or remove the cookies your conversion tags depend on.

  • Cookie restrictions and consent friction

    further reduce what browser-side tracking can capture at the moment of purchase.

The result: incomplete PrestaShop conversions, degraded match quality, and campaigns optimising on a partial view. You're paying for sales you can't fully measure.

The solution

The PrestaShop purchase conversion, sent server-side

The datafirefly_serverside module captures the purchase on the actionValidateOrder hook, the moment the order is validated server-side, and sends it server-to-server, directly to each platform's conversion API (CAPI): the channel built for reliable, first-party conversion data.

Recovered purchases

The purchase conversion no longer depends on browser tags surviving ad-blockers and ITP, so you recover sales that would otherwise be lost.

Better match quality

The module captures the available browser identifiers (_fbp, _fbc, _ttp, GA clientId) for a richer, more reliable match signal.

Zero risk to checkout

Fail-safe by design: tight timeouts and full exception handling. A tracking error is logged but never interrupts the order.

How it works on PrestaShop

Three steps to complete purchase tracking

1

Install the PrestaShop module

Upload datafirefly_serverside-1.0.1.zip in Modules → Module Manager. PrestaShop registers the actionValidateOrder hook automatically.

2

Paste your connection key

Enter your Tenant ID and HMAC secret, copied from "Connect your shop" in your DataFirefly account (/app). No pixel IDs to enter.

3

The purchase goes out server-side

On every validated order, the purchase event is HMAC-signed and delivered to the dispatcher, which fans it out to all your configured destinations. One install, every platform.

What the module does

The server-side connector for PrestaShop, in detail

Server-side purchase conversion

Sends the purchase event on order validation (actionValidateOrder hook), directly to the conversion APIs.

HMAC-SHA256 signing

Every request is signed per shop (X-Dfss-Tenant, X-Dfss-Timestamp, X-Dfss-Signature headers). Destination credentials never touch the browser.

Fail-safe by design

Tight HTTP timeouts and full exception handling: a tracking error never breaks checkout. Failures are logged.

Consent gating

With "Require consent", the purchase is only sent if the customer consented to an advertising service: read server-side from the tarteaucitron / DataFirefly Cookie Manager cookie.

Richer match quality

Captures the available browser identifiers (_fbp, _fbc, _ttp, GA clientId) alongside order and customer data.

"Send test event" button

Verify connectivity and the signature from the configuration screen, before even placing a real test order.

.htaccess-protected source

The module ships with an .htaccess that denies direct web access to the module's source files.

EU-hosted

The dispatcher runs in Germany: your data stays in the EU.

Destinations

Meta CAPI, GA4, TikTok, Pinterest and Microsoft Advertising from PrestaShop

The PrestaShop purchase conversion is delivered server-side to your platforms' conversion APIs. Configure it once in your DataFirefly account.

Meta Conversions API CAPI GA4 Measurement Protocol
TikTok Events API
Pinterest Conversions API
Google Ads Data Manager API
Microsoft Advertising Conversions API

Google Ads (Data Manager API) is available at the platform level. The PrestaShop module 1.0.1 delivers the purchase to Meta CAPI, GA4, TikTok, Pinterest and Microsoft Advertising.

Installation

Install the server-side module on PrestaShop

Requirements: PrestaShop 1.7.6.0 or newer, a DataFirefly server-side account, and outbound HTTPS access to serverside.datafirefly.com.

1

Get your connection key

In "Connect your shop" in your DataFirefly account (/app), copy your Tenant ID (e.g. shop_yourstore_xxxx) and your HMAC secret (64-character key). The endpoint is pre-filled to https://serverside.datafirefly.com/v1/events.

2

Upload the ZIP in the Back Office

Modules → Module Manager → Upload a module, then select datafirefly_serverside-1.0.1.zip (do not unzip). PrestaShop installs it and registers the actionValidateOrder hook automatically.

3

Configure the module

Click Configure. Enter Tenant ID, HMAC secret, leave the endpoint at its default, set Require consent to Yes (recommended for GDPR), then switch Enable tracking to Yes and save.

4

Verify the connection

Click Send test event: a success message confirms Tenant ID, HMAC secret and endpoint. Then place a real test order and open the Inspector in /app to confirm the purchase event arrives (value, currency, reference).

Delivery errors are logged under Advanced Parameters → Logs (entries prefixed [DataFirefly SS]). A tracking failure is logged but never interrupts the order.

Pricing

Simple pricing that scales with your store

One subscription covers your whole account: all of its PrestaShop stores: on a single consolidated invoice. Move up a tier for more sites and more monthly events.

Free

Free while you stay under the monthly allowance: nothing breaks if you go over.

€0 / month
1 site included
Up to 10,000 events / month
No credit card required
Start free

Starter

For a single PrestaShop store getting server-side tracking in place.

€39 / month
1 site included
Up to 500K events / month
One consolidated invoice
Choose Starter

Scale

For agencies and portfolios managing up to twenty stores at higher volume.

€349 / month
20 sites included
Up to 10M events / month
One consolidated invoice
Choose Scale

The PrestaShop module is included in every plan. See the full pricing on the homepage.

Trust & GDPR

Built for European privacy standards

EU-hosted (Germany)

Your data is processed in the EU.

HMAC-authenticated ingestion

Every purchase request is signed per shop (HMAC-SHA256).

Consent-aware

The purchase is only sent with advertising consent, read server-side.

Credentials never exposed

Destination tokens stay on the dispatcher side, never in the browser.

Module source protected

An .htaccess denies direct web access to the module's files.

99.5% availability target

Measured and tracked in real time on our public status page, in line with our SLA.

FAQ

Frequently asked questions: PrestaShop module

What is the server-side tracking module for PrestaShop?

The datafirefly_serverside module (version 1.0.1, compatible with PrestaShop 1.7.6 and up) sends your store's purchase conversion server-to-server, directly to each platform's conversion API (Meta CAPI, GA4, TikTok, Pinterest, Microsoft Advertising). The purchase event fires when the order is validated and is HMAC-signed for your shop. Destination credentials never pass through the browser.

Can the module break my PrestaShop checkout?

No. The module is fail-safe by design: tight HTTP timeouts and full exception handling mean a tracking error can never interrupt the order or the checkout. A failed delivery is logged (prefixed [DataFirefly SS] in the PrestaShop logs) but the order always completes normally.

Do I have to paste pixel IDs into PrestaShop?

No. You only enter your Tenant ID and HMAC secret, copied from the "Connect your shop" screen in your DataFirefly account (/app). The dispatcher knows which destinations to fan out to. You never paste a pixel ID or access token into the store.

Does the module respect GDPR consent?

Yes. With Require consent enabled, the purchase is only sent if the buyer has consented to an advertising service, read server-side from the tarteaucitron / DataFirefly Cookie Manager cookie. The dispatcher is EU-hosted (Germany) and personal data is redacted.

Do I need to host a server-side GTM container?

No. DataFirefly sends events directly to each platform's conversion API: there's no server-side GTM container to host or maintain. Setup is limited to the PrestaShop module and a single connection key.

On WooCommerce instead? Discover the WooCommerce server-side tracking plugin.

Move your PrestaShop store's tracking server-side

Send the purchase conversion server-side to Meta CAPI, GA4, TikTok, Pinterest and Microsoft Advertising: HMAC-signed, fail-safe for checkout, EU-hosted and consent-aware.