Module 01
First-Party Domain Delivery
Your visitor's browser sends data to tracking.yourdomain.com — your own subdomain, not facebook.com or google-analytics.com. Ad-blockers see a first-party request and let it through. Result: events that used to silently disappear now reach every ad platform.
- Custom CNAME pointed to a dedicated container
- Free Let's Encrypt SSL with auto-renewal
- Designed to reduce interference from common browser-side blocking tools
Cookie Keeper can keep visitor identity available for up to 365 days where browser rules permit. In many cases, server-set first-party cookies outlast browser-set JavaScript cookies, which helps longer attribution windows stay usable.
- HttpOnly first-party cookies set server-side
- Up to 365-day expiration where browser policy allows
- Consistent _fbp, _ga, _ttp, _gcl identifiers
Module 03
Click ID Restorer
A customer clicks your Google ad, browses for 20 minutes, then buys. But a browser extension stripped the gclid before your page loaded. This module captures fbclid, gclid, ttclid (and 8 more) the instant they land, stores them in three redundant locations, and attaches them to every conversion — even weeks later.
- fbclid, gclid, ttclid, msclkid, twclid, _scid
- li_fat_id, gbraid, wbraid, dclid, yclid
- Triple-redundant storage: cookie + LS + IDB
Module 04
Consent Mode V2
Built-in consent controls can support GDPR-, CCPA-, and Consent Mode-style workflows. Geo-aware defaults and signaling are available in the product, while your legal or compliance team should still validate the final implementation for your market.
- Region-based default consent
- Granted / denied / declined event signaling
- Works with Google's modeled conversions
Module 05
Conversion Ledger
Every conversion that touches your tracking subdomain is recorded server-side in a ledger you can query. Reconcile against ad platform reports, audit duplicate events, and trace attribution chains.
- Event name, value, currency, click ID
- 30-day attribution window default
- Exportable CSV for finance & reconciliation
Module 06
Live Analytics Dashboard
Watch events flow in real time, monitor container health, see dispatch success rates by platform, and identify drops within seconds — not after a 24-hour ad platform delay.
- Real-time event stream by platform
- Per-event dispatch health (success / fail)
- Conversion timeline & identity stitching view
Module 07
Identity Stitching (UID)
Unify anonymous and known visitors with a server-side UID. When the same person logs in or checks out, BonicBD stitches their pre-login activity to their identified profile and forwards the join key to ad platforms.
- Server-side UID lookup and merge
- Hashed email / phone matching
- Cross-device identity carry-over
Module 08
GA4 Stealth Sender
This module proxies GA4 hits through your own domain, which can materially reduce browser-side loss from blocking tools and brittle client-side setups. It is designed to improve collection quality, though final results still depend on consent, traffic mix, and tag configuration.
- First-party endpoint for GA4 collect
- Optional dataLayer mirroring
- Skips obvious bot traffic before billing
Module 09
Bot Detection & Filtering
Automated user-agent and behavioral filtering blocks crawlers, scrapers, and obvious automation before they hit your container — keeping your usage quota for actual humans.
- User-agent rule database, updated continuously
- Whitelist for legitimate bots (Google, Bing)
- Rate limiting per IP per second
Module 10
Server-Side Data Store
Persist visitor attributes server-side: session counters, last-touch source, custom flags. Read them back from any tag inside your GTM container without touching the browser.
- Read / write namespaced keys per visitor
- Survives across sessions and devices
- Available as GTM variables out of the box
Module 11
Preview & Debug Inspector
Dedicated preview container plus an event inspector to see exactly what arrives, what the container does with it, and what gets sent to which destination — before you push to production.
- Isolated preview environment per client
- Full request / response inspection
- Replay events for QA and debugging