Module 01
First-Party Domain Delivery
All tracking traffic flows through your own subdomain (e.g. tracking.yourdomain.com). Browser ad-blockers can't recognize it as tracking because, technically, it is your domain serving your visitors.
- Custom CNAME pointed to a dedicated container
- Free Let's Encrypt SSL with auto-renewal
- Survives uBlock, Brave Shield, AdGuard, Pi-hole
Server-side cookie management bypasses Safari's 7-day ITP truncation. Visitor identity stays consistent across return visits, attribution windows extend to a full year.
- HttpOnly first-party cookies set server-side
- Up to 365-day expiration on Safari and iOS
- Consistent _fbp, _ga, _ttp, _gcl identifiers
Module 03
Click ID Restorer
Captures click IDs the moment a paid visitor lands and persists them across cookies, localStorage, and IndexedDB so they're attached to every conversion event — even days later.
- fbclid, gclid, ttclid, msclkid, twclid, _scid
- li_fat_id, gbraid, wbraid, dclid, yclid
- Triple-redundant storage: cookie + LS + IDB
Module 04
Consent Mode V2
Built-in compliance for GDPR, CCPA, PDPA, and DPDP. Geo-aware default consent state, a clean banner, and full Google Consent Mode V2 signaling — without needing a separate CMP subscription.
- Region-based default consent
- Granted / denied / declined event signaling
- Works with Google's modeled conversions
Module 05
Conversion Ledger
Every conversion that touches your tracking subdomain is recorded server-side in a ledger you can query. Reconcile against ad platform reports, audit duplicate events, and trace attribution chains.
- Event name, value, currency, click ID
- 30-day attribution window default
- Exportable CSV for finance & reconciliation
Module 06
Live Analytics Dashboard
Watch events flow in real time, monitor container health, see dispatch success rates by platform, and identify drops within seconds — not after a 24-hour ad platform delay.
- Real-time event stream by platform
- Per-event dispatch health (success / fail)
- Conversion timeline & identity stitching view
Module 07
Identity Stitching (UID)
Unify anonymous and known visitors with a server-side UID. When the same person logs in or checks out, BonicBD stitches their pre-login activity to their identified profile and forwards the join key to ad platforms.
- Server-side UID lookup and merge
- Hashed email / phone matching
- Cross-device identity carry-over
Module 08
GA4 Stealth Sender
An ad-blocker-resistant GA4 transport that proxies hits through your own domain. Drops the typical 30-40% data gap between gtag and your reported sessions to single digits.
- First-party endpoint for GA4 collect
- Optional dataLayer mirroring
- Skips obvious bot traffic before billing
Module 09
Bot Detection & Filtering
Automated user-agent and behavioral filtering blocks crawlers, scrapers, and obvious automation before they hit your container — keeping your usage quota for actual humans.
- User-agent rule database, updated continuously
- Whitelist for legitimate bots (Google, Bing)
- Rate limiting per IP per second
Module 10
Server-Side Data Store
Persist visitor attributes server-side: session counters, last-touch source, custom flags. Read them back from any tag inside your GTM container without touching the browser.
- Read / write namespaced keys per visitor
- Survives across sessions and devices
- Available as GTM variables out of the box
Module 11
Preview & Debug Inspector
Dedicated preview container plus an event inspector to see exactly what arrives, what the container does with it, and what gets sent to which destination — before you push to production.
- Isolated preview environment per client
- Full request / response inspection
- Replay events for QA and debugging