Zbridge – Integration for Cloudflare Zaraz

Maelezo

Every analytics and ad tag you add to a store slows it down, sets its own cookies and runs on your visitors’ devices. WP Zbridge moves that work to Cloudflare Zaraz, which runs GA4, Meta, Google Ads and other tools from Cloudflare’s network. Your pages load one small bridge script (about 3 KB gzipped) plus Cloudflare’s Zaraz loader, instead of separate tags such as gtag.js and the Meta Pixel.

WP Zbridge builds the Zaraz setup for you, sends WooCommerce and engagement events in the format each tool expects, and passes your visitors’ consent to Zaraz and Google Consent Mode v2. Its dashboard checks the setup and shows how many paid orders never reached Zaraz from the visitor’s browser, for example because of an ad blocker or a closed tab.

Features

  • Ready-made Zaraz containers: Download a Zaraz configuration for GA4, Meta and Google Ads and import it in the Cloudflare dashboard. No API token needed. (Pro sends it to Cloudflare for you with Sync to Zaraz.)
  • WooCommerce events: Product views, add to cart, remove from cart, cart and checkout views and purchases, sent as Zaraz e-commerce events that GA4, Meta and other tools understand. Optional parent product IDs for variations.
  • Engagement events: Scroll depth, file downloads, outbound links, email and phone clicks, site search, 404 pages, comments and form submissions (Contact Form 7, WPForms and other HTML forms), with GA4-style event names.
  • Cookie banner and Google Consent Mode v2: A built-in banner (about 5 KB gzipped) with an EU-only option, or detection of Complianz, Cookiebot, CookieYes, Borlabs Cookie 3 and the WP Consent API. Consent is passed to Google Consent Mode v2 and Zaraz.
  • Instagram embeds: Show Instagram posts and reels through the Zaraz Instagram tool, which builds them on Cloudflare. Visitors load no Instagram script and get no Instagram cookies. Paste a link or use the [zbridge_instagram] shortcode.
  • Cookie scanner: Loads your homepage in your browser and lists the cookies, browser storage and third-party sites it uses, grouped by consent category, so you can check your banner and privacy policy.
  • Setup wizard and health check: The wizard guides you through connecting Cloudflare Zaraz and choosing your tools. The dashboard then checks your setup, tells you when Zaraz needs the updated container, a tool is missing its access token or consent isn’t collected, and offers a button that fixes it.
  • Translation-ready: All visitor-facing and admin text can be translated on translate.wordpress.org.

WP Zbridge Pro

Pro adds a server fallback: when the browser could not report a paid order (ad blocker, closed tab), your server sends it to Zaraz. It also adds Sync to Zaraz and rollback through the Cloudflare API, Zaraz activity and failed-request reports on the dashboard, TikTok, Snapchat, Pinterest (tag and Conversions API), Bing, LinkedIn, Reddit and X (Twitter) recipes, Gravity Forms, Fluent Forms and Elementor Forms, logins and sign-ups, time on page, refunds and WooCommerce Subscriptions renewals sent from the server.

Included Zaraz Recipes

  1. Google Analytics 4 (GA4): Page views, e-commerce events (view_item, add_to_cart, purchase and more; refund in Pro), engagement events, and form submissions as generate_lead.
  2. Meta Pixel & Conversions API: Page views, e-commerce events, Lead and Contact, with event properties for custom conversions. Requires a Conversions API access token.
  3. Google Ads: Remarketing on every page, purchase conversions with value, currency and order ID, and optional lead conversions for form submissions.
  4. TikTok (Pro): Page views, e-commerce events, SubmitForm and Contact. Requires an Events API access token.
  5. Snapchat Pixel (Pro): Page views, purchases and sign-ups.
  6. Pinterest Tag & Conversions API (Pro): Page views, e-commerce events, leads and sign-ups. With an optional Conversions API token, add to cart and purchases are also sent from Cloudflare’s servers; purchases carry the same event ID from both sides, so Pinterest counts them once.
  7. Microsoft Advertising (Bing UET) (Pro): Page views, e-commerce events and lead form submissions.
  8. LinkedIn Insight Tag (Pro): Page views, with optional purchase and lead conversions.
  9. Reddit Pixel (Pro): Page visits, purchases with value, currency and order ID, leads and sign-ups.
  10. X (Twitter) Pixel (Pro): Page views, with optional purchase (with value) and lead conversions for the X event IDs you enter.

External services

This plugin integrates with external services to deploy analytics configurations and process tracking events.

  • Cloudflare Zaraz & Cloudflare API (api.cloudflare.com):

    • What it is: Server-side tracking execution engine at the edge and REST API for container provisioning.
    • What data is sent & when: When an administrator clicks Sync with Cloudflare (Pro), the container configuration is sent to the Cloudflare API. Tracking events from site visitors (page views, e-commerce and engagement events) are sent to Cloudflare Zaraz on your own domain. When the cookie banner or a consent plugin is used, Zaraz forwards them to each tool only after the visitor consents.
    • Service Provider: Cloudflare, Inc.
    • Terms of Service: https://www.cloudflare.com/terms/
    • Privacy Policy: https://www.cloudflare.com/privacypolicy/
  • Google Analytics & Google Tag Manager:

    • What it is: Web analytics platform configured via pre-built Zaraz recipes and audited by the local Cookie & Tracker Scanner.
    • What data is sent & when: Page views, e-commerce and engagement events, forwarded by Cloudflare Zaraz. When the cookie banner or a consent plugin is used, only after the visitor grants analytics consent.
    • Service Provider: Google LLC
    • Terms of Service: https://marketingplatform.google.com/about/analytics/terms/us/
    • Privacy Policy: https://policies.google.com/privacy
  • Meta (Facebook Pixel & Conversions API):

    • What it is: Advertising attribution and conversion tracking configured via Zaraz recipes and audited by the local Cookie & Tracker Scanner.
    • What data is sent & when: Page views, e-commerce events and lead events, forwarded by Cloudflare Zaraz with the visitor’s IP address, user agent and Meta browser cookies. This plugin does not send customer email addresses or phone numbers (WP Zbridge Pro can, if you turn it on, with purchases sent from the server). When the cookie banner or a consent plugin is used, only after the visitor grants marketing consent.
    • Service Provider: Meta Platforms, Inc.
    • Terms of Service: https://www.facebook.com/legal/terms
    • Privacy Policy: https://www.facebook.com/privacy/policy/

Screenshots

Installation

  1. In your WordPress dashboard, go to Plugins > Add New Plugin, search for Zbridge and click Install Now.
  2. Click Activate.
  3. The Setup Wizard will launch automatically to guide you through connecting Cloudflare Zaraz.
  4. Enter your tool IDs in the Setup Wizard, then download the Zaraz container and import it in Cloudflare (Zaraz > Settings > Advanced > Import). With Pro, connect a Cloudflare API token and click Sync to Zaraz instead.

FAQ

Do I need a paid Cloudflare account?

No. Cloudflare Zaraz is available on all Cloudflare plans, including Free, and includes 1,000,000 Zaraz events per month at no cost. Your site must use Cloudflare as its proxy.

How does the Pro server fallback avoid counting an order twice?

When the thank-you page reports the purchase, the browser tells WordPress, and the server does not send it. Only orders the browser did not report are sent by the server, 10 minutes after payment. Both use the same order ID and event ID, so GA4 (transaction ID) and Meta (event ID) can discard a duplicate if one ever occurs.

Do I need to export or sync the container again after updating?

Only when the container changes. The Setup Health box on the Zbridge dashboard compares your current settings with the container you last exported or synced and tells you when Zaraz needs the new one.

Does it work with my consent plugin?

Yes, with Complianz, Cookiebot, CookieYes, Borlabs Cookie 3 and any plugin that uses the WP Consent API. Turn on Hold Zaraz tools until a consent plugin grants consent under Privacy & Consent, and WP Zbridge passes the visitor’s choice to Google Consent Mode v2 and Zaraz. Or use the built-in cookie banner instead.

Does it work with page caching?

Yes. The bridge script is static, the EU-only banner decides in the visitor’s browser, and cart events reach the browser through WooCommerce cart fragments, so cached pages work for every visitor.

Does it send my customers’ email addresses or phone numbers?

The free plugin never does. WP Zbridge Pro has an optional setting, off by default, that adds them to purchases the server sends so Meta, TikTok and Pinterest can match them; their Zaraz tools hash the details before sending.

What is the difference between the free plugin and Pro?

The free plugin covers GA4, Meta and Google Ads, WooCommerce and engagement events, the cookie banner, Consent Mode v2, Instagram embeds and container export. Pro adds Sync to Zaraz, TikTok, Snapchat, Pinterest, Bing, LinkedIn, Reddit and X, the server fallback for purchases the browser missed, refunds, Gravity/Fluent/Elementor forms, logins, sign-ups and time on page, and Zaraz activity reports. See wp-zbridge.com.

Will this replace my existing tracking plugins?

For the tools WP Zbridge supports, yes: Zaraz loads them, so you can remove their separate tracking plugins or tags. Keep any tool WP Zbridge does not configure.

How does the Cookie Scanner work?

Go to Zbridge > Privacy & Consent, find Cookie & Tracker Scanner and click Scan Site for Cookies & Trackers. It loads your homepage in a hidden frame in your browser, reads the names of the cookies and browser storage that are set (never their values) and the third-party sites the page contacts, and adds the cookies your server sets. Accept all cookies in the banner first to see what visitors who accept get.

Reviews

Soma maoni yote 0

Wachangiaji & Wasanidi

“Zbridge – Integration for Cloudflare Zaraz” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

1.5.0

  • New (Pro): Reddit Pixel recipe: page visits, purchases with value, currency and order ID, leads and sign-ups.
  • New (Pro): X (Twitter) Pixel recipe: page views, plus purchase and lead conversions for the X event IDs you enter.
  • New (Pro): WooCommerce Subscriptions renewal orders are sent from the server straight away, marked as renewals, and kept out of the orders-missed totals. They can be turned off under Event Tracking.
  • New: Borlabs Cookie 3 consent choices are passed to Google Consent Mode v2 and Zaraz.
  • New: The free edition’s dashboard shows how many paid orders never reached Zaraz from the visitor’s browser.
  • Improvement: Setup Health shows how many setup steps are done until setup is complete.
  • Improvement (Pro): Roll back last sync restores the Zaraz configuration exactly as Cloudflare had it.
  • Improvement: Pro features are unlocked only by an active license.

1.4.4

  • Improvement: The server fallback’s DNS lookup keeps certificate checks on.
  • Improvement: Copy support info leaves the HTTP Events API path out of log lines.

1.4.3

  • Improvement: Pro updates show the plugin icon and banners on the WordPress update screens.

1.4.2

  • New (Pro): Roll back last sync puts back the Zaraz configuration saved just before your last sync.
  • Improvement: The Zaraz Activity card (Pro) updates together with Setup Health, without reloading the page.
  • Improvement: Sync to Zaraz publishes only on zones that use Zaraz’s Preview & Publish workflow; other zones apply the changes at once.
  • Improvement: Every message in the plugin’s admin screens can be translated on translate.wordpress.org.

1.4.1

  • Improvement: Setup Health on the dashboard updates by itself when you open the dashboard and after you save settings, sync or download the container. Recheck runs the checks again with fresh data from Cloudflare.
  • Improvement: Setup Health problems come with a button that fixes them: Sync to Zaraz (Pro) or Download container for an outdated container, and Add the token for a missing Meta or TikTok access token.
  • Improvement: Rejected requests are counted from your last sync when it is within the last 24 hours, so a fixed problem disappears once you sync.
  • Improvement: The sync button and its messages are called Sync to Zaraz everywhere.

1.4.0

  • New: Cookie scanner reads what your homepage actually sets in the browser: cookies, local and session storage, and the third-party sites it contacts, together with the cookies your server sets. Each item is matched to a known provider or listed as not recognised.
  • New: Debugging tools on the Diagnostics tab: detailed logging that switches itself off after 24 hours, a button that opens your site with the Cloudflare Zaraz debugger, and “Copy support info” (versions, Setup Health, settings and recent log lines, with tokens and keys left out).
  • New: WP Zbridge appears in Tools > Site Health, with its setup details and a check that flags Setup Health problems.
  • New: Documentation links on the Plugins screen, in the plugin header, on every tab, for every recipe and for each Setup Health item.
  • Improvement: GA4 receives each form submission once, as generate_lead.
  • Improvement: Zaraz configurations published by WP Zbridge are labelled “WP Zbridge sync” in the Zaraz version history.
  • Improvement: The Cloudflare tab shows the container export first in the free edition.

1.3.9

  • New: Setup Health on the dashboard checks whether Zaraz has your latest container, whether Meta and TikTok have their access tokens, and how consent is collected.
  • New: The setup wizard asks for the Meta access token and the Google Ads conversion ID and label.
  • New (Pro): Zaraz activity on the dashboard: actions per tool, events received and requests your tools rejected, from Cloudflare’s Zaraz Monitoring API.
  • New (Pro): Optional customer matching. Purchases sent by the server can carry the buyer’s email, phone, name and address for Meta, TikTok and Pinterest, hashed by their Zaraz tools. Off by default.
  • Improvement: The cookie preferences dialog opens centred, with Accept All as the main button.
  • Improvement: The cookie banner and admin screens are translation-ready.
  • Improvement: Dashboard totals cover the last 30 days, and Cloudflare traffic statistics use Cloudflare’s GraphQL Analytics API.
  • Improvement: The Instagram shortcode also accepts a pasted link or embed code.

1.3.8

  • Improvement: Text domain matches the WordPress.org plugin slug (zbridge), so translations from translate.wordpress.org load automatically.

1.3.7

  • Improvement: Google Ads loads on every page view, keeping the ad click ID from the landing page for later conversions and building remarketing audiences.
  • New: Optional Google Ads lead conversion label that counts form submissions.
  • Improvement: Form submissions are also sent to GA4 as the recommended generate_lead event.
  • Improvement: Meta events now include their event properties (form ID, file name, link URL and similar) for use in custom conversion rules.
  • Improvement: The Pinterest recipe uses the Zaraz Pinterest tool.
  • Improvement: TikTok, Snapchat and Bing keep their click and visitor IDs through Zaraz client storage.
  • New: Instagram embeds through the Zaraz Instagram tool, by pasting a post or reel link or with the [zbridge_instagram] shortcode.
  • New: LinkedIn Insight Tag recipe (Pro) with page views and optional purchase and lead conversions.
  • New: Pinterest Conversions API (Pro). Add to cart and purchases are sent from Cloudflare’s servers, and purchases carry the same event ID as the Pinterest Tag so they are counted once.

1.3.6

  • Improvement: Support WP Consent API change events and Cookiebot consent decline states across Google Consent Mode and Zaraz.
  • Privacy: Excluded customer personal contact details from e-commerce tracking payloads.
  • Improvement: Dashboard telemetry displays verified order delivery counts and browser vs server attribution split.

1.3.5

  • Improvement: Preserve landing page attribution for new visitors by queuing initial pageview until consent is granted.
  • Improvement: Forward visitor Zaraz consent context in server fallback purchase dispatches.
  • Improvement: Standardized product ID formatting across all e-commerce events.

1.3.4

  • Feature: Standardized engagement events on GA4 naming conventions (scroll, file_download, click, form_submit, login, sign_up).
  • Feature: Site searches sent as Zaraz Products Searched e-commerce events across supported ad and analytics platforms.
  • Feature: Standard conversion goals (Lead, Contact, CompleteRegistration) for form submissions, link clicks, and registrations.
  • Improvement: Enhanced outbound link tracking precision and recipe credential validation.

1.3.3

  • Feature: Client-side geo-lookup for EU cookie banner targeting to ensure compatibility with full-page caching.
  • Improvement: Ensure cookie banner scripts execute reliably alongside third-party script optimizers.
  • Improvement: Zaraz container export enables automated recipe actions by default.

1.3.2

  • Feature: Comprehensive WooCommerce event tracking for product views, cart additions, removals, checkout steps, and purchases.
  • Feature: AJAX add-to-cart tracking for product forms and block-based carts.
  • Feature: Full Cloudflare Zaraz e-commerce format compliance (order_id, products, total).
  • Feature: Server fallback purchase delivery with automated 10-minute deduplication for dropped browser orders.
  • Feature: Dedicated Zaraz HTTP Events API endpoint per site with secure debug keys.
  • Feature: Google Consent Mode v2 and Zaraz consent purpose mapping across all active tools.
  • Privacy: Stripped email and telephone numbers from link click events.

1.3.1

  • Improvement: Unified Zaraz container generator for manual JSON export and 1-click Cloudflare API sync.
  • Improvement: Full Cloudflare dashboard import compatibility with complete UUID and container schema mapping.
  • Improvement: Container exports automatically filter to only include configured tools.
  • Improvement: Added Zaraz e-commerce event flag to server-side order and refund dispatches.

1.3.0

  • Improvement: Enabled Zaraz automated actions for Google Analytics 4 for zero-configuration event forwarding.
  • Improvement: Streamlined Google Analytics 4 recipe setup and configuration defaults.

1.2.9

  • Improvement: WordPress Coding Standards compliance and normalized text domain.
  • Security: Input sanitization for Cloudflare geolocation headers (HTTP_CF_IPCOUNTRY) and escaped privacy settings outputs.
  • Improvement: Migrated administration stylesheets and scripts to registered WordPress enqueue hooks.
  • Documentation: Standardized external services disclosure covering Cloudflare Zaraz, Google Analytics, and Meta Pixel.

1.2.8

  • Feature: Cloudflare Edge Geo-Targeting detects 32 European jurisdictions (EU/EEA/UK/CH) to grant consent and eliminate banner fatigue outside Europe.
  • Feature: Early Google Consent Mode v2 initialization injected synchronously in head with returning visitor cookie detection.
  • Feature: Granular cookie preferences modal dialog with 4 accessible category controls (Strictly Necessary, Analytics, Marketing, Functional).
  • Feature: Visual theming controls supporting Auto (OS preference), Light, and Dark modes with custom color overrides.
  • Feature: Privacy policy page integration with dynamic permalink resolution and custom link text.

1.2.7

  • Feature: Distinct plugin branding and separate packaging for Pro and Lite editions.
  • Feature: Mutual exclusion guard preventing simultaneous activation conflicts between Pro and Lite.
  • Feature: Added PRO EDITION and LITE EDITION badges to plugin metadata in plugins list.
  • Feature: Public edge distribution pipeline for Lite releases via Cloudflare R2 storage.

1.2.6

  • Improvement: Visual tab icons across administration settings tabs for faster navigation.
  • Improvement: Hardened Cloudflare REST API synchronization routines and connection testing with robust credential validation.
  • Improvement: Automated connection mode validation and manual JSON export fallback handling.
  • Improvement: Structured Cloudflare Worker logging and edge observability integration.

1.2.5

  • Improvement: Expanded administration interface into 7 focused views: Dashboard, Setup, Cloudflare, Recipes, Consent, Diagnostics, and Settings.
  • Improvement: Direct navigation shortcuts from Dashboard telemetry cards to relevant settings.
  • Improvement: Modularized package separation and distribution archive optimization.

1.2.4

  • Feature: User engagement tracking suite including active time on page milestones, scroll depth, and email/tel links.
  • Feature: Lead form submission tracking for Contact Form 7, WPForms, Gravity Forms, Fluent Forms, Elementor Forms, and generic HTML forms.
  • Feature: User lifecycle tracking for logins, user registrations, and WordPress comments.
  • Feature: Real-time telemetry dashboard with live server-side event dispatcher stream.

1.2.3

  • Feature: Setup Wizard auto-hide upon completion to maintain a clean admin sidebar, with instant relaunch controls.
  • Feature: License deactivation mechanism allowing domain transfers by releasing site slots on the edge registry.
  • Improvement: Visual walkthrough documentation covering onboarding, Cloudflare setup, and Zaraz recipes.

1.2.2

  • Feature: Live Edge Handshake Verifier with real-time Anycast latency testing and Cloudflare PoP airport code detection.
  • Feature: Manual and offline WooCommerce order attribution dispatch via WooCommerce Order Actions for phone and B2B orders.
  • Improvement: Optimized edge payload delivery and parameter sanitization routines.

1.2.1

  • Feature: Automated 1-click Cookie & Tracker Scanner auditing scripts and categorizing discovered cookies.
  • Feature: 4-Step Setup Wizard for initial onboarding.
  • Feature: Reopen consent preferences floating badge for GDPR compliance.
  • Feature: Pre-configured Zaraz recipe for Snapchat Pixel and Conversions API.
  • Feature: WooCommerce variation Parent ID resolution to prevent catalog mismatch errors.
  • Feature: Tracking for single product variant selection, checkout payment info, and site search.
  • Improvement: Exclude logged-in store administrators and staff from analytics tracking.

1.2.0

  • Initial release of WP Zbridge: Cloudflare Zaraz containers for WordPress and WooCommerce, with a server fallback for purchases in Pro.