Everything you'd want to know before you install.
A detailed look at how DataFirefly Server-Side — Shopware conversion tracking (free) works, why we built it the way we did, and the thinking behind the features above.
A free plugin, a service that does the work
DataFirefly Server-Side is free and will stay free: it is the Shopware connector for the DataFirefly Server-Side Tracking service. The plugin captures the conversion at the exact moment Shopware places the order, builds it cleanly and signs it; the service ingests it and delivers it server-side to your advertising and analytics platforms. You install the plugin at no cost, and subscribe to the service for delivery. That division of roles is what makes installation trivial on the shop side and operations lightweight on the server side.
Why your conversions vanish — and how to get them back
Ad blockers, Safari ITP and cookie restrictions silently erase a growing share of your conversions: the browser tag doesn't load, the cookie dies too early, the conversion is never recorded. As a result, your Meta and Google campaigns optimise on an incomplete picture. By sending the purchase from the Shopware server, at order placement, this plugin bypasses the browser layer entirely: the conversion arrives, every time, whatever the visitor's setup.
A rich purchase, built for match quality
A server-side conversion is only as good as its match data. The plugin builds a complete payload: paid value, currency, order number, products and quantities, email and customer ID, phone, name, city, postcode and country from the billing address, plus the browser identifiers captured at order time (_fbp, _fbc, _ttp and the GA4 client id). Every optional field is only added when present and valid — including in headless flows where some associations may be missing: the dispatcher validates strictly, and a well-formed event is a delivered event.
Consent under control — compatible with our Cookie Consent
Shopware core does not set a single server-readable marketing-consent cookie, so the plugin puts you in charge. Enable the consent gate and enter the name of the cookie set by your consent tool (and, if needed, an expected value fragment): the plugin checks it server-side before every send. It works naturally with our DataFirefly Cookie Consent plugin — a GDPR-compliant banner with native Google Consent Mode v2 — as well as any CMP that sets a cookie. The approach is privacy-first: gate on with no cookie present or no name configured, nothing is sent. Together, the two plugins form a coherent chain on Shopware: banner, Consent Mode v2 and server-side tracking speaking the same language.
Signed, no secrets exposed, and fail-safe
Every event is signed with HMAC-SHA256 using your tenant secret: the exact bytes signed are the exact bytes posted, with a timestamp checked within a 300-second anti-replay window. Your Meta, GA4, TikTok, Pinterest and Google Ads credentials stay in your DataFirefly account — never in the shop, never in the browser. And because tracking must never cost a sale, the whole plugin is fail-safe: 2-second connection and 4-second execution timeouts, every error caught and logged to the Shopware logs, no exception ever reaching the checkout flow.
Connected in one paste, tested in one command
From your DataFirefly client area (Connect your shop), copy the one-line connection key (dfss_): it contains your tenant ID, signing secret and ingestion endpoint. Paste it into the plugin configuration and enable tracking — configuration is per sales channel if you run several. The console command datafirefly:serverside:test sends a synthetic page_view to the dispatcher: a 200 response confirms the connection and signature are correct, without touching real orders. If a real delivery fails, the HTTP code and order number are logged to the Shopware logs for immediate diagnosis.
Move up to the DataFirefly Server-Side subscription
The plugin captures and signs; the DataFirefly Server-Side Tracking service ingests, deduplicates and delivers server-side to five destinations: Meta CAPI, GA4, TikTok Events API, Pinterest Conversions API and Google Ads. The dispatcher is hosted in Germany, ingestion is HMAC-signed, personal data is masked in the Event Inspector and delivery respects consent. One integration, one consolidated invoice, multiple sites possible. Explore the plans and subscribe at server-side.datafirefly.com: Starter at 39 €/month (1 site, up to 500K events), Growth at 119 €/month (5 sites, up to 2M), Scale at 349 €/month (20 sites, up to 10M). The plugin is ready: all it needs is your connection key.
There are no reviews yet.