Shopware server-side tracking plugin
Install the DatafireflyServerSide plugin on your Shopware 6 store and send the purchase conversion server-side, directly to Meta Conversions API (CAPI), GA4, TikTok, Pinterest and Microsoft Advertising. Per-shop HMAC signing, fail-safe by design so a tracking error never breaks checkout, and a configurable GDPR consent option. A single connection key, no pixel IDs to paste into Shopware.
The plugin installs like any Shopware extension: a ZIP uploaded in "My extensions" in the administration, no FTP access required.
Your Shopware browser tags are leaking sales
The Meta pixel, GA4 tag, or TikTok tag in your Shopware theme runs in the customer's browser: where it's increasingly blocked before it even gets to fire.
-
Ad-blockers
stop the tags from loading on the order confirmation page: the purchase is never reported to your platforms.
-
Safari ITP
and similar protections shorten or remove the cookies your conversion tags depend on.
-
Cookie restrictions and consent friction
further reduce what browser-side tracking can capture at the moment of purchase.
The result: incomplete Shopware conversions, degraded match quality, and campaigns optimising on a partial view. You're paying for sales you can't fully measure.
The Shopware purchase conversion, sent server-side
The DatafireflyServerSide plugin captures the purchase
the moment the order is placed
(checkout.order.placed event), server-side, and sends it
server-to-server, directly to each platform's conversion
API (CAPI): the channel built for reliable, first-party
conversion data.
Recovered purchases
The purchase conversion no longer depends on browser tags surviving ad-blockers and ITP, so you recover sales that would otherwise be lost.
Better match quality
The plugin captures the available browser identifiers (_fbp,
_fbc, _ttp, GA clientId) for a
richer, more reliable match signal.
Zero risk to checkout
Fail-safe by design: tight timeouts and full exception handling. A tracking error is logged but never interrupts the order.
Three steps to complete purchase tracking
Install the Shopware plugin
Upload the DatafireflyServerSide ZIP in Extensions → My extensions → Upload extension, then activate it. Shopware registers the order event subscriber automatically.
Paste your connection key
Open the plugin configuration and paste your connection key (dfss_…) copied from "Connect your shop" in your DataFirefly account (/app). No pixel IDs to enter.
The purchase goes out server-side
On every placed order, the purchase event is HMAC-signed and delivered to the dispatcher, which fans it out to all your configured destinations. One install, every platform.
The server-side connector for Shopware, in detail
Server-side purchase conversion
Sends the purchase event when the order is placed, directly to the conversion APIs.
HMAC-SHA256 signing
Every request is signed per shop (X-Dfss-Tenant, X-Dfss-Timestamp, X-Dfss-Signature headers). Destination credentials never touch the browser.
Fail-safe by design
Tight HTTP timeouts and full exception handling: a tracking error never breaks checkout. Failures are logged.
Consent gating
"Require consent" option: the purchase is only sent if the consent cookie you specify is present, name and value configurable to match your CMP, checked server-side.
Richer match quality
Captures the available browser identifiers (_fbp, _fbc, _ttp, GA clientId) alongside order and customer data.
Built-in test event
Verify connectivity and the signature with a single console command
(bin/console datafirefly:serverside:test), before even
placing a real test order.
One key, no exposed secrets
The connection key (dfss_…) stays server-side. Destination tokens live in the dispatcher, never in the storefront.
EU-hosted
The dispatcher runs in Germany: your data stays in the EU.
Meta CAPI, GA4, TikTok, Pinterest and Microsoft Advertising from Shopware
The Shopware purchase conversion is delivered server-side to your platforms' conversion APIs. Configure it once in your DataFirefly account.
Meta Conversions API
CAPI
GA4
Measurement Protocol
TikTok
Events API
Pinterest
Conversions API
Google Ads
Data Manager API
Microsoft Advertising
Conversions API
Google Ads (Data Manager API) is available at the platform level. The Shopware plugin 1.0.0 delivers the purchase to Meta CAPI, GA4, TikTok, Pinterest and Microsoft Advertising.
Install the server-side plugin on Shopware
Requirements: Shopware 6.5 or 6.6, a DataFirefly server-side account, and outbound HTTPS access to serverside.datafirefly.com.
Get your connection key
In "Connect your shop" in your DataFirefly account (/app), copy your
connection key (prefixed dfss_…).
It contains everything the plugin needs: tenant, HMAC secret and
endpoint are already encapsulated, no other settings to enter.
Upload the ZIP in the administration
Shopware administration → Extensions → My extensions
→ Upload extension, then select the plugin ZIP.
Then click Activate. On the command line:
bin/console plugin:install --activate DatafireflyServerSide.
Configure the plugin
Open the plugin configuration. Paste your connection key (dfss_…). If you use a CMP, enable Require consent (off by default) and specify the name and value of the consent cookie to check. Switch tracking to enabled, then save.
Verify the connection
Run bin/console datafirefly:serverside:test: a success
message confirms the key and signature are valid. Then place a real
test order and open the Inspector in /app to
confirm the purchase event arrives (value, currency, reference).
Delivery errors are logged in the Shopware logs
(entries prefixed [DataFirefly SS]). A tracking
failure is logged but never interrupts the order.
Simple pricing that scales with your store
One subscription covers your whole account: all of its Shopware stores: on a single consolidated invoice. Move up a tier for more sites and more monthly events.
Free
Free while you stay under the monthly allowance: nothing breaks if you go over.
Starter
For a single Shopware store getting server-side tracking in place.
Billed €390 per year: 12 months commitment, no pro-rata refund.
Growth
For merchants and small agencies running up to five stores.
Billed €1 190 per year: 12 months commitment, no pro-rata refund.
Scale
For agencies and portfolios managing up to twenty stores at higher volume.
Billed €3 490 per year: 12 months commitment, no pro-rata refund.
The Shopware plugin is included in every plan. See the full pricing on the homepage.
Built for European privacy standards
Your data is processed in the EU.
Every purchase request is signed per shop (HMAC-SHA256).
With "Require consent", the purchase is only sent if the configured consent cookie is present: checked server-side.
Destination tokens stay on the dispatcher side, never in the browser.
The dfss_… key encapsulates everything: no destination token ever lives in the store.
Measured and tracked in real time on our public status page, in line with our SLA.
Frequently asked questions: Shopware plugin
What is the server-side tracking plugin for Shopware?
The DatafireflyServerSide plugin (version 1.0.0, compatible with Shopware 6.5 and 6.6) sends your store's purchase conversion server-to-server, directly to each platform's conversion API (Meta CAPI, GA4, TikTok, Pinterest, Microsoft Advertising). The purchase event fires when the order is placed and is HMAC-signed for your shop. Destination credentials never pass through the browser.
Can the plugin break my Shopware store's checkout?
No. The plugin is fail-safe by design: tight HTTP timeouts and full
exception handling mean a tracking error can never interrupt the
order or the checkout. A failed delivery is logged (prefixed
[DataFirefly SS] in the Shopware logs) but the order
always completes normally.
Do I have to paste pixel IDs into Shopware?
No. You only paste a connection key (dfss_…),
copied from the "Connect your shop" screen in your DataFirefly
account (/app). The dispatcher knows which destinations to fan
out to. You never paste a pixel ID or access token into the store.
Does the plugin respect GDPR consent?
Yes, via the Require consent option (off by default). Once enabled, the purchase is only sent if the consent cookie you specify is present: cookie name and value are configurable and checked server-side. Shopware 6 does not expose a single server-readable marketing consent cookie, so the plugin adapts to your store's consent solution. The dispatcher is EU-hosted (Germany) and personal data is redacted.
Do I need to host a server-side GTM container?
No. DataFirefly sends events directly to each platform's conversion API: there's no server-side GTM container to host or maintain. Setup is limited to the Shopware plugin and a single connection key.
On another platform? Discover the PrestaShop server-side tracking module or the WooCommerce server-side tracking plugin.
Move your Shopware store's tracking server-side
Send the purchase conversion server-side to Meta CAPI, GA4, TikTok, Pinterest and Microsoft Advertising: HMAC-signed, fail-safe for checkout, EU-hosted and consent-aware.