Overview
Meta's advertising tag for tracking user actions and sending conversion data to Facebook, Instagram, and WhatsApp. Enables retargeting, lookalike audiences, and conversion measurement. The Conversions API (CAPI) offers a server-side complement. One of the most scrutinised advertising tags in the EU following multiple DPA enforcement actions.
Detection capabilities
- Signature count
- 4
- Detection methods
- network
- Property types
- hostnamepathname
Performance impact
Performance Impact
- Script size
- 60 KB
- Requests per page
- 4
Common mistakes
- 1Firing the pixel on page load without consent - the PageView event transmits the full URL and cookies to Meta immediately
- 2Passing PII in custom event parameters without hashing - violates Meta's terms and creates a data breach risk
- 3Not implementing the Conversions API, leading to data loss from ad blockers and ITP restrictions
- 4Using Advanced Matching without understanding it sends hashed PII to Meta, requiring additional GDPR consent
- 5Failing to enable Limited Data Use mode for California users, required for CCPA compliance
Compliance considerations
Sets cookies (_fbp, _fbc) and transmits browsing behaviour to Meta servers in the United States.
Consent: Explicit consent required under GDPR. Multiple DPA enforcement actions - Belgian DPA fined IAB Europe (Feb 2022), Irish DPC fined Meta EUR 390M (Jan 2023) for behavioural advertising legal basis.
International transfers: EU-US Data Privacy Framework provides a mechanism - verify Meta's DPF self-certification status.
Advanced Matching & CAPI: Both involve additional personal data processing requiring separate disclosure in your privacy notice.
CMP configuration: Categorise under advertising/marketing consent and block until explicit consent is granted.
Related services
Scan your site for Meta
Run a free Consentmark scan to see how Meta is loading on your site, whether it respects consent, and where governance gaps exist across your wider tag estate.
Start a free scan