Server-Side Tracking for Meta Pixel and Conversions API changelog

All notable changes to Server-Side Tracking for Meta Pixel and Conversions API (kv_meta_conversions_api) are documented here. The format follows Keep a Changelog and the project uses Semantic Versioning.

[Unreleased]

[1.1.1] - 2026-10-15

Fixed

• License verification works on servers without the PHP sodium extension (common on shared and cPanel hosting). Before, the signed answer of the license server could not be checked there, so the add-on entered the 14-day grace period and then switched its features off. The add-on now checks the signature with its own built-in Ed25519 code when the extension is missing.

[1.1.0] - 2026-10-13

Added

• License check. Enter your license key (or CS-Cart Marketplace license number) on the new License tab of the settings. The add-on verifies it with cs-cart.kaviolabs.com when the key is saved and then once a day, only from the admin panel or cron, never on storefront requests. The license covers the domain entered at purchase and all its subdomains; local development hosts are always allowed.
• License status on the License tab (status, licensed domain, result per storefront, last check, end of the updates period) with a Check now button, and a cron entry point (php admin.php --dispatch=kv_meta_conversions_api_license.check).
• Without a valid license for the store’s domain the add-on stops tracking: no pixel, no browser or server events, no catalog feed (404), the relay and consent endpoints answer 204, queued events are not sent and Send a test event refuses. Checkout and order status changes are never affected, and the admin panel shows a notice. New installations and upgrades from 1.0.x work for 14 days before a key is required, and if the license server cannot be reached the add-on keeps working for 14 days.

[1.0.3] - 2026-10-12

Fixed

• Works with the Performance Booster (full page cache) of CS-Cart 4.21: cached pages no longer carry one visitor’s advanced matching data, consent state or event IDs. On such pages the browser creates the event ID and sends the server copy of PageView, ViewContent and Search to the store, so browser and server events still deduplicate for every visitor. An fbclid from the landing page is kept in the browser until the pixel may use it.
• Background delivery bookkeeping no longer writes to CS-Cart storage data while the full page cache is on, which would have cleared the whole page cache.
• Compatible with CS-Cart and Multi-Vendor 4.21 and PHP 8.3: tested on Multi-Vendor 4.21.2 with PHP 8.3 and the new Nova theme. The add-on now declares the supported range 4.17.2 – 4.21.x.

[1.0.2] - 2026-10-12

Added

• In-place upgrades now complete themselves. After the add-on files are replaced (uploading the new zip over the installed add-on in Add-ons → Manage add-ons, copying the files by FTP, or installing an Upgrade Center package), the next admin page view adds any missing tables, columns, settings, language variables and e-mail templates, and updates the stored add-on version and icon flag. Existing data and setting values are kept. A hidden schema_version setting records the last applied version.
• Stores upgraded from 1.0.0 by copying the files or with an Upgrade Center package now also get the lowercase event status language variables added in 1.0.1, so the event log shows status labels (Queued, Sent, Failed…) instead of raw keys.

Fixed

• After an upgrade by uploading the new zip over the installed add-on, CS-Cart saved empty multiple-choice settings with an empty selected entry. The next admin page view now repairs them.

[1.0.1] - 2026-10-12

Fixed

• The add-on icon was not shown in the admin panel: addon.xml now declares has_icon.
• Event log status labels (Queued, Sent, Failed…) showed raw language variable names: the status_Q/P/R/S/F/X keys are now lowercase, as CS-Cart looks language variables up in lowercase.

[1.0.0] - 2026-10-12

Added

• Meta Pixel and Conversions API events with one shared event_id for deduplication: PageView, ViewContent, Search, AddToCart, AddToWishlist, InitiateCheckout, AddPaymentInfo, Purchase, Lead (newsletter, call request) and CompleteRegistration, each switchable for the browser and the server.
• Server-side cart and wishlist change detection with a session event queue, delivered by the next page or the CS-Cart AJAX response (AJAX add to cart, quick view, mini-cart).
• Purchase with a stable order-based event ID: browser event printed once on the confirmation page, server event queued once when the order reaches a configurable purchase status, using the browser context saved at checkout (fbp, fbc, IP address, user agent, page).
• Advanced matching with Meta’s normalisation rules and SHA-256 hashing (email, phone with country calling code, names, city, state, zip, country, date of birth, external ID) for the pixel and the Conversions API.
• First-party _fbp/_fbc cookies created on the server after consent; fbclid capture before consent.
• Asynchronous server queue: delivery after the response (fastcgi_finish_request/LiteSpeed) or by a non-blocking background request, cron command, batching up to 500 events, retries with backoff for temporary errors, single-event fallback for rejected batches, 7-day expiry, log retention.
• Event log (Marketing → Meta events log) with payloads, responses, filters and the actions send now, retry failed and clear.
• Test event code setting and a “Send a test event” button; Graph API version as a setting (default v26.0).
• Consent handling (automatic, opt-in, off): CS-Cart GDPR cookie dialog service, Kavio Labs consent contract (window.kvConsent, kv:consent-* events, fn_kv_cookie_consent_mode_get_consent()), kvMetaCapi.consent() API, held server events released or dropped by the decision, Limited Data Use option, service registration for the Kavio Labs cookie consent add-on.
• Catalog feed for Meta Commerce Manager as CSV or RSS 2.0 XML with content IDs matching the pixel, sale prices, availability, images, brand, variation groups and category paths; vendor feeds.
• Multi-Vendor vendor pixels with optional own access token and test code, a separate save action that skips profile premoderation, one Purchase per checkout for the store pixel and one per vendor order for vendor pixels, no hashed customer data for vendor pixels.
• Warnings for the core Facebook pixel add-on and other Meta pixel add-ons; admin status, consent, queue and feed blocks.
• PHP hooks kv_meta_conversions_api_get_consent and kv_meta_conversions_api_feed_item.