Services

Compliance Audit

You can't be compliant without knowing everything that's happening on your site. Most merchants don't. We inventory every cookie, network request, use of browser storage and fingerprinting done on your users' devices, measure it against relevant privacy rules, and make suggestions on what to do about each.

What's included

• An itemized list of every cookie, local storage, session storage and IndexedDB entry, network request and fingerprinting technique on your site
• A complete audit of your tags and tracking
• A recommendation for every item we find, with the risk of each choice explained
• Working sessions with your team to make the calls, since what tracks and what doesn't is often a gray area
• A remediation plan, carried out in implementation
• If you've received a lawsuit or demand letter, a review of it, so our recommendations answer those specific claims
• Free onboarding to Stakeout, our continuous monitoring tool

What you get

• An executive summary and presentation anyone in your company can follow
• A detailed report in plain English: how we tested, every pixel inside and out, and what we see others doing, from small businesses to the enterprise
• A spreadsheet of every pixel and storage item, with a checkbox for exactly what happens to each, and every detail behind it
• Meetings with the relevant people on your team to walk through the audit at a high level and explain the next steps
• Access to us over Slack and email throughout

Most audits take one to two weeks.

Compliance Implementation

We put in place what we found and agreed on in the audit, so every tag on your site does what your visitors chose, in every region you sell.

What's included

• Setting up or reconfiguring your consent banner, on any consent platform: Consentmo, TrueVault, OneTrust, Cookiebot, Osano, Ketch, Transcend and more
• Wiring the banner to your platform's privacy controls, such as the Shopify Customer Privacy API
• Wiring the banner to Google Tag Manager and your server-side containers, so server-side events respect opt-outs too
• Global Privacy Control and Do Not Sell or Share flows that actually work
• A consent setup that new and removed tags, apps and scripts respect automatically, so changes stay simple and compliant
• A consent policy for every tag on the site: marketing, analytics and anything else that tracks
• Removing every unused script the audit found, which can make your site noticeably faster
• Fixing the issues raised in any lawsuits or demand letters
• Full QA in every region you've turned on
• Onboarding to Stakeout, if you'd like us to keep watching

What you get

• Meetings with the relevant people on your team to agree the details and walk through what we've done
• Access to us over Slack and email throughout

Most implementations take two to three weeks. Your privacy policy stays with your legal team. We make sure your site does what it says.

Pixel Audit

Audit any pixel or data destination on your site, for marketing or anything else: Meta, GA4, Google Ads, TikTok, Klaviyo, Omnisend, and newer ones like OpenAI's. In the browser, on a server, or through a platform like Elevar.

What's included

• The pixels and tags that matter to you, or that are causing concern, and what each one sends
• Server-side events and Conversions APIs, not just the browser
• Event types, and the events each platform needs but isn't getting
• Data quality: exact formats, missing parameters, values, currency, IDs, and deduplication between browser and server events
• Match quality: how well each platform can match your events to real customers, using its own score, like Meta's Event Match Quality (EMQ), and the customer details it's receiving
• The customer data you're sending, and what you're allowed to send
• What each pixel does before and after a visitor makes a privacy choice
• Fixes in priority order, explained in plain English
• Free onboarding to Stakeout, our continuous monitoring tool

What you get

• A presentation of what we found, that anyone in your company can follow
• A detailed document in plain English, pixel by pixel
• A spreadsheet of every to-do, with all the details
• Meetings with the relevant people on your team to walk through the audit at a high level and explain the next steps
• Access to us over Slack and email throughout

Most audits take one to two weeks.

Pixel Implementation

Every pixel set up to send complete, accurate data to the platforms that need it, and only with the right consent. Optimized to get you the most performance possible out of your email, ad and analytics platforms.

What's included

• Installing or rebuilding pixels and their events
• Server-side and Conversions API connections, through your existing server-side setup or one we build
• Customer data passed the right way, where consent allows
• Consent wired into every pixel
• QA in each platform's own tools, from Meta Events Manager to GA4 DebugView
• A couple of weeks of monitoring after launch, to make sure every change took effect

What you get

• Meetings with the relevant people on your team to agree the details and walk through what we've done
• Access to us over Slack and email throughout

Most implementations take two to three weeks.

Platform Audit

Already paying for a tracking platform like Elevar, Converge, Blotout, Stape, Littledata, Analyzify or Triple Whale? We check it's doing what you're paying for. These tools are often only partly used, and sometimes they aren't needed at all. We'll show you how to get more out of the one you have, or whether you need it.

What's included

• Your platform's configuration, checked against your site and your ad accounts
• What reaches each destination, and whether it's sending all the data it could
• Features you're paying for but not using
• Whether the platform respects your visitors' privacy choices, or could get you into trouble with privacy rules
• Other tags firing the same events alongside it
• An honest opinion on whether you need it: plenty of businesses do fine with GA4 alone, while others rely on parts of these tools
• Free onboarding to Stakeout, our continuous monitoring tool

What you get

• A presentation of what we found, that anyone in your company can follow
• A detailed document in plain English on your platform and everything it touches
• A spreadsheet of every to-do, with all the details
• Meetings with the relevant people on your team to walk through the audit at a high level and explain the next steps
• Access to us over Slack and email throughout

Most audits take one to two weeks.

Platform Tuning

We put the audit into practice: the platform respects consent, sends every destination all the data it can, and earns what you pay for it. Or we trim it back to what you need. Starting with a new platform? We'll onboard you.

What's included

• Onboarding to a new platform, like Elevar, set up right from day one
• Turning on the features you're paying for but not using
• Getting every destination all the data the platform can send
• Making the platform respect consent, like turning on Elevar's strict consent mode
• Removing tracking you don't need
• A couple of weeks of monitoring after the changes, to make sure they took effect

What you get

• Meetings with the relevant people on your team to agree the details and walk through what we've done
• Access to us over Slack and email throughout

Most implementations take two to three weeks.

Custom Tracking

For tracking off-the-shelf tools can't do: server-side architecture, data pipelines, and attribution that follows a customer from first touch to purchase.

What's included

• Server-side tagging on GTM Server Side, Cloudflare Zaraz or a custom build
• Pipelines into BigQuery and your CRM
• B2B attribution through trial, demo and contract, with CRM data sent back to GA4 and your ad platforms
• Click ID and cookie persistence, and identity resolution, within your visitors' consent
• Built on what you already have, like Elevar or Stape, rather than ripped out and replaced

What you get

• Meetings with the relevant people on your team to scope the build and walk it through
• Access to us over Slack and email throughout

Tracking Requests

"Can you track this for me?" Most tracking work starts with a question like that, and the answer is yes: small, specific changes, made with consent in mind and checked before we hand them back.

The kind of thing customers ask for

• Can you add another event to our Meta pixel?
• Can you count clicks on this button in GA4?
• Can you make sure our purchase event has all its data?
• Can you track new customer purchases in TikTok?
• Can you add this pixel, or take that one off?
• Can you find out why this conversion stopped firing?

What you get

• Access to us over Slack and email while we work on it

Usually quoted as a small fixed project, or drawn from a block of hours, with our standard one-business-day SLA. We're flexible on how you pay for them.

Privacy & Pixel Monitoring

Compliance isn't a one-time picture. Most sites are compliant for the first couple of weeks after an implementation, then they drift as tags, apps and scripts change. Monitoring catches it, and all it asks of you is a reply when something changes.

What's included

• Continuous monitoring of your site's privacy and pixels through Stakeout, our monitoring tool
• Scans as often as your site needs, from several times a day to once a month
• An email whenever something changes
• Easily assign any change for us to fix, or handle it yourself
• Ongoing help with consent, tagging and tracking performance

What you get

• Slack access to the Trackstars team for questions, work orders and anything else that comes up

Monitoring starts from an audit or implementation, so it knows what right looks like for your site. Onboarding is free with either.

Tracking Retainers

Tracking engineers on call: a set number of hours each month, sized to you, with a direct ticket queue into our team for everything that comes up. It works especially well for agencies.

What's included

• A direct ticket queue into our team
• Tracking requests, fixes and new builds
• Architecture decisions and privacy questions
• Standard one-business-day SLA

What you get

• Meetings with your team whenever they're useful
• Access to us over Slack and email

Anything over 50 hours is quoted as its own project. Ask us what size of retainer fits.