What does this tool actually check?

Pixel install, domain verification, Advanced Matching with hashed PII, CAPI deduplication (eventID), Consent Mode v2, Apple Privacy Manifest, GTM container, fbclid first-party capture. The 2026 stack — post-AEM removal (June 2025) and post-7-day-view-window deprecation (January 2026).

Why does iOS privacy still matter in 2026?

About half of iOS users opt out of ATT (AppsFlyer 2025). iOS 17 strips fbclid in Mail/Messages/Safari Private. iOS 18 hides marketing email in the Promotions tab — clicks down ~20% since January 2025. Industry attribution gaps in 2026 reach 50-70%. Meta's own benchmark: advertisers running Conversions API see 17.8% lower cost per result. This tool finds the gaps.

Do I need to install anything?

No. Paste your URL, we audit your public-facing tracking setup. No login, no API tokens, no scripts to install.

How accurate is this without a runtime browser?

We run static + runtime checks (real headless Chrome). We catch every public-facing configuration issue — the most common cause of failures. Server-side CAPI payload quality (the EMQ ceiling) requires API access to your Events Manager. Our $497 Pixel Fix service includes that deeper audit + the engineering to fix what we find.

Free tools / Meta Pixel & CAPI Auditor

Is your Meta tracking ready for the 2026 stack?

AEM is gone (June 2025). 7-day view windows are gone (Jan 2026). Meta just shipped free one-click CAPI (April 2026). If your tracking was “set up” before this year, your campaigns are optimizing against broken data. Meta’s own benchmark: CAPI-equipped advertisers run 17.8% lower cost per result. Paste your URL. We audit the 2026 stack. Free.

Audit my pixel

How it works

Real checks. Real score. Real fixes.

We fetch your URL with a real headless browser, parse the tracking infrastructure, and grade it against the 2026 paid-ads stack — the same checklist top performance agencies (Wpromote, Tinuiti, Common Thread Collective) charge $5K-15K to set up.

1. Paste your URL (any landing page or homepage)
2. We check: pixel install, domain verification, Advanced Matching with hashed PII, eventID dedup, Consent Mode v2, Apple Privacy Manifest, GTM container, fbclid first-party capture, runtime pixel firing
3. You get a 0-100 score + estimated EMQ + prioritized fix list + attribution-loss estimate

What's new in 2026

AEM is gone. Meta removed the 8-event limit + prioritization in June 2025. All eligible events auto-aggregate.
7-day view + 28-day view windows removed January 12, 2026. Reported conversions dropped 15-40%.
Meta One-Click CAPI shipped April 2026. Free, no developer — but mirrors only what your Pixel sends. EMQ caps around 5-6.
Marketing API v23/v24 required by February 10, 2026. Older integrations break.

What this does NOT check

Server-side CAPI payload quality (the EMQ ceiling) and Events Manager configuration require API access. Our paid Pixel Fix service ($497) includes the deeper audit + the engineering to lift EMQ to 8+ — link at the bottom of your results.

Run the audit

Now check your tracking.

We visit your URL, parse the tracking infrastructure, and grade it against the 2026 Meta + iOS 14/17/18 stack. Static + runtime checks. Returns in 15–25 seconds. No signup.

Client website * Where to send your results *

We email a copy of your results so you can re-open it later — and forward to your developer.

I confirm I have permission to audit this site, or it is publicly accessible without restriction. I understand Foreground will:

Visit the URL with a headless browser (Chrome) identifying as Foreground-CAPI-Auditor/1.0
Programmatically accept cookie consent on my behalf to test pixel behavior under consenting-user conditions
Force-execute Meta-related dormant scripts ONLY (no other tracking activated) to verify the pixel works end-to-end
Capture only public network requests + DOM state; never store the full page content
Honor robots.txt and respect standard rate limits

3 of 3 audits left today

Enter URL + email above to run the audit

Score

—/100

—

How this scores

90-100 · Top 10% — clean 2026 stack
75-89 · Above average — minor gaps
60-74 · Industry average — leaves $ on the table
40-59 · At risk — real attribution loss
0-39 · Broken — tracking barely works

—

Speak human → what these terms mean

EMQ — Event Match Quality. Meta's 0-10 score for how well your tracking events match real users on Facebook/Instagram. The dial that controls your ad performance: 5 is the floor, 8+ is healthy, every point lifts ROAS noticeably.

Pixel — Meta's tracking tag. A small JavaScript snippet on your site that sends events (page views, purchases, leads) to Meta so it can attribute conversions to ads.

CAPI — Conversions API. The same events your Pixel sends, but server-to-server (your server → Meta's server), bypassing browsers, ad-blockers, and iOS privacy restrictions. The deterministic layer.

eventID — A unique ID stamped on every event so Meta can deduplicate when both your Pixel AND CAPI send the same conversion. Without it: every sale logs twice.

Advanced Matching (AAM) — When your Pixel passes hashed user info (email, phone, name) along with each event, Meta can match more conversions to real ad-clickers. Biggest single lever for EMQ.

Hashed PII — Personally Identifiable Information (email, phone, name) run through SHA-256 so the value sent to Meta is a 64-character fingerprint, not the raw data. Meta hashes their side too and matches the fingerprints — privacy-safe.

fbclid — Facebook Click ID. The ?fbclid=<long-string> parameter Meta appends to every ad click. It's how Meta connects "I saw an ad" → "I bought something" — the deterministic attribution layer.

_fbc cookie — A first-party cookie your server sets to remember the fbclid from a visitor's first visit. Required because iOS 17/18 strips fbclid from URLs on the next page hop.

iOS 17 LTP — Link Tracking Protection. Apple feature that automatically removes click-tracking parameters (including fbclid) from URLs in Mail, Messages, and Safari Private. iOS 18 expanded its scope.

iOS 18 Hide My Email (HME) — Apple service that gives users a different anonymous email alias every time they sign up. Breaks email-based AAM matching unless you also pass a stable external_id.

external_id — A stable hashed user ID (your internal user_id, hashed) you pass alongside email/phone in AAM. Survives iOS 18 HME aliasing because it doesn't depend on the email staying the same.

Domain verification — A meta tag in your <head> that proves to Meta you own this domain. Without it, Meta drops 100% of iOS 14+ events from the domain — silent.

CMP — Consent Management Platform. The cookie banner (Cookiebot, OneTrust, Iubenda, Termly). Required for GDPR/PDPL compliance; Meta increasingly enforces consent before processing events.

Consent Mode v2 — Google + Meta's standardized way of telling tracking platforms whether the user has consented. Lets you respect privacy without losing all signal — Meta still gets aggregated, anonymized data when consent is denied.

GTM — Google Tag Manager. A free container where you manage all tracking tags (Pixel, GA, conversions) in one place. Required step before "GTM Server-Side."

GTM Server-Side (GTM SS) — Running GTM on your own subdomain (e.g. ss.yoursite.com) so all tracking traffic is first-party. The Tier-2 stack top agencies use to dodge ad-blockers + iOS restrictions.

AEM (now removed) — Aggregated Event Measurement. Meta's old iOS 14 workaround that capped each domain to 8 conversion events. Meta removed it in June 2025; if anyone is still telling you to "prioritize 8 events," they're outdated.

Apple Privacy Manifest — A file Apple requires inside every iOS app declaring which third-party SDKs (like Meta SDK) collect what. Apple rejects iOS app updates without it — only relevant if you have a native iOS app.

Is your Meta tracking ready for the 2026 stack?

Real checks. Real score. Real fixes.

Now check your tracking.

Top fixes (in priority order)

Meta shipped free CAPI. Here's why $497 still earns its money.

Already past the basics?

Is your Meta tracking ready for the 2026 stack?

Real checks. Real score. Real fixes.

Now check your tracking.

Share this tool to unlock 7 more audits today.

Did you post it on X / Twitter?

+7 audits ✓

Top fixes (in priority order)

Meta shipped free CAPI. Here's why $497 still earns its money.

Already past the basics?