Security

Tracking you can trust to run.

The most expensive tracking failures are the silent ones: in one account an outage went unnoticed for seven weeks. uncoverflow watches itself, heals itself and proves its reliability with numbers.

Ask any vendor: “When was your backup last actually restored?” Our answer: every week, with a measured log.

Backups proven every week
Delivery rate shown openly in the report
DPA, records of processing & TOMs included
CHECK STATUS · OUR OWN OPERATIONS · 7 DAYSWhat the checks proved this weekDelivery to the platforms101,321 sent · 0 pendingPlatform outages10 transient errors, retried automaticallyBackup actually restored9.9 M events verified · 7:48 min · 5 OctAutomated checks20+ checks · run every 5 minutesWeekly heartbeatIf the mail does not arrive, that is an alert tooA silent outage does not sit here for seven weeks. CHECK STATUS · OUR OWN OPERATIONS · 7DAYSWhat the checks proved thisweekDelivery to the platforms101,321 sent · 0 pendingPlatform outages10 transient errors, retried automaticallyBackup actually restored9.9 M events verified · 7:48 min · 5 OctAutomated checks20+ checks · run every 5 minutesWeekly heartbeatIf the mail does not arrive, that is an alerttooA silent outage does not sit here forseven weeks.
Measured in our own operations across all active client accounts, 29 Sept – 6 Oct 2026.
20+
automated checks monitor your tracking
around the clock
< 10 min
measured recovery time
in the weekly backup drill
99.9 %
target delivery rate — measured live
and shown openly in the report
Self-monitoring

More than 20 automated checks monitor your tracking around the clock — the five most important ones in detail.

The most expensive tracking failure is the one nobody notices for weeks: a snippet deleted by a theme update, an expired API access, a cache still serving old pages. That's why uncoverflow monitors itself — at every layer of the pipeline.

PURCHASES WITH WEB SIGNAL · PER HOUR Pixel silent since 14:02Orders arrive, web events don’t · mail sent The shop keeps selling. Only the attribution would have died silently — for weeks, without this check. PURCHASES WITH WEB SIGNAL · PER HOURPixel silent since 14:02Orders arrive, web events don’t · mailsentThe shop keeps selling. Only the attributionwould have died silently — for weeks, withoutthis check.
Schematic curve. The case is real: the pixel-failure check.

Snippet check

Checks live on your pages whether the tracker is really being served — and fetches the tracker address itself on top. Catches cache, theme and proxy failures.

Canary conversions

Every night a synthetic test conversion runs through the entire pipeline. If the chain breaks anywhere, we know in the morning — not at the end of the month.

Delivery check

Every real conversion has to have a delivery result within a defined window. If it's missing, we get an alert — before a gap opens up in the ad account.

Configuration health

A daily deep check of every platform connection: expiring access, deleted conversion actions, looming double counting — reported before it costs you data.

Certificate & timer watch

The TLS certificates of every tracking domain and every internal schedule are checked for liveness. A job that quietly stopped is an alert — not a chance discovery.

Visible to your client

Delivery rate, tracker status and platform health sit in the client report link as a health cockpit — plus a status page with the measured delivery rate and a dated trust certificate. On request, your client gets a calm email when there's a real drop, before they have to ask.

Also on duty, per client: checkout watchdog (customers reach the checkout, purchases stop = payment step dead; reported as soon as it can no longer be chance) · order reconciliation (shop orders against ours, every three hours; missing ones are fetched) · pixel-failure check (orders keep coming in while web visits collapse = pixel deleted) · webhook check (rejected shop deliveries within minutes, not weeks) · consent check (a sudden opt-in collapse after a theme update, and equally “100 % consent” = banner wired up wrong) · click ID coverage (if a gclid class disappears, auto-tagging is missing) · cost check (CPC jump against the weekday median) · double-counting check (native tag and our upload both set as primary) · platform value check (Google reports a multiple of your real revenue) · cart bridge check (Shopify purchases without a source, normalized against the opt-in rate) · over-firing check (a pixel sends the same event more than once) · refund, lead value and accounting write-back checks (every write-back has to report success regularly) · data consistency check (new/returning totals and lead values guarded against double counting) · order safety net (backfill from the shop API every three hours) · Meta connection (access per ad account, dataset per campaign) · a version radar for the Google, Meta and Shopify interfaces.

Self-healing

Heal first, then report — the only thing that raises an alarm is what needs a human.

WHAT HAPPENSWHAT FOLLOWSNetwork hiccup, platform busyheals itselfError persists after all retriesmail to youA path dies silentlycheck reportsNew timer unwatchedgate failsOnly what needs a human raises an alarm. WHAT HAPPENS → WHAT FOLLOWSNetwork hiccup, platform busy→ heals itselfError persists after all retries→ mail to youA path dies silently→ check reportsNew timer unwatched→ gate failsOnly what needs a human raises an alarm.
The escalation ladder: heal first, report second — four levels, each with its own net.

Network hiccups, overloaded platform interfaces, brief outages: transient errors heal themselves through staged retries. Whatever doesn't heal itself escalates cleanly — step by step, all the way to the weekly heartbeat, whose absence is an alert in itself.

  • Persist before sendingEvery event is safely committed to the database first, then distributed. If a platform goes down, nothing is lost — the delivery is made up later.
  • No deploy without proofEvery system update ends with an end-to-end test through the real pipeline. If it fails, nothing ships.

The escalation chain

  1. Level 1
    Transient error → heals quietly
    Queue retry, re-delivery, automatic restart — no alert, no data loss
  2. Level 2
    Persistent error → alert within 5 min
    The check run reports whatever retries couldn't heal
  3. Level 3
    Silently dead job → liveness alert
    Even a process that stopped running altogether is detected — silence is not an option
  4. Level 4
    Weekly heartbeat
    If the summary email doesn't arrive, the alerting chain itself is broken — that gets noticed too
The weekly proof

One email a week that sums it all up — its absence would itself be an alert.

Daily encrypted database backups with a continuous transaction log — and the decisive part: a weekly recovery drill that actually restores the backup and tests it with verification queries. A backup that has never been restored is just a hope — ours is proven every week, in under ten minutes.

The results of all checks are bundled into the weekly heartbeat: one short status email per system. And because it's scheduled, the rule is: if it doesn't arrive, the alerting chain itself is broken — silence is monitored here too.

Weekly heartbeat · example Sunday · 6:00 p.m.
Deliveries 1,482 conversions sent · 3 automatically retried · 0 open. → Delivery rate 99.9 %.
Recovery drill Backup really restored and verified — 7.8 minutes. → Recoverability proven.
Check status Snippet, canary, delivery, configuration, certificates: all green. → Nothing to do.
GDPR & data sovereignty

Data protection is architecture, not an appendix.

No plain-text PII

Email and phone are hashed before they are stored — in exactly the format Google and Meta expect for matching. Plain text never sits in the database.

Consent is enforced

No consent, no forwarding — the server checks that again on every delivery, not just the banner in the browser. Until then the tracker works cookieless.

Access and erasure at the push of a button

One request by email address, phone number or device identifier is enough: the system returns or deletes everything held on that person — across web journey, calls, orders and audience membership, in a single pass. By click or API, across every data store.

Contract package & no lock-in

DPA (Art. 28 GDPR), records of processing activities and TOMs are ready to go. Servers in Germany. All raw data exportable at any time — even leaving is a feature.

Your data protection officer has questions? Just bring them along to the call.

Book a demo
DPA, records of processing & TOMs ready to go · Servers in Germany
Beyond cookies

Keeps measuring where cookies end.

When a visitor declines tracking, classic setups go blind — but the visitor still buys. uncoverflow keeps measuring cookielessly: no device access, following the same principle as Google Consent Mode, cleanly within EU privacy law.

Ephemeral, not stored

Without consent the tracker works with ephemeral in-memory IDs — nothing is read from or written to the device. If the visitor consents later, the running session is adopted seamlessly; if they revoke, everything is wiped from the device.

Hidden revenue, quantified

The cookieless panel shows how much revenue happens without consent — real purchases plus estimated lead value. Not a marketing promise but a number from your own data, with an honest minimum-volume gate instead of “100% of one sale”.

We notice when your banner breaks

A theme update wrecks the cookie banner, the opt-in rate collapses — and nobody notices until the monthly report is empty. Our consent check detects both the sudden drop and the opposite anomaly (100% consent = banner miswired) and speaks up before it gets expensive.

Consent stays the boundary

What’s captured cookielessly stays in your database for your reporting — only consented data is forwarded to Google, Meta & co. No grey zone, no “nobody will notice”: the boundary is architecture, not a toggle. And if someone requests access or deletion, that is one button — across every data store, right down to the audience lists.

Support and availability

Who you reach, when — and what we commit to.

Target values from our terms, not a guarantee: this is how fast we respond and how you reach us.

Contact

Incident reports and questions to info@uncoverflow.com. Support in German and English, on working days Monday to Friday from 9 am to 5 pm (public holidays in North Rhine-Westphalia excepted). You can check the current service status at any time on status.uncoverflow.com.

Response time

If event intake or forwarding fails entirely, we respond within 24 hours on working days; to other incidents within two working days. These are targets we set ourselves.

Availability

The intake endpoints of the service are reachable 99.0% on a monthly average — measured at the data centre’s handover point. We announce maintenance windows 48 hours ahead and place them between 10 pm and 6 am.

The contracts behind it: Terms (German) · Privacy · Sub-processors (German)

Frequently asked

Answered briefly.

How risky is the switch?
Hardly at all. You start in parallel run: 30 days. Your existing tracking stays switched on — nothing is turned off, migrated or overwritten. You compare both sets of numbers side by side and decide afterwards. There is no setup fee during the trial, and it stays cancellable monthly.
Where is the data stored?
On servers in Germany, in a dedicated Postgres database. Personal data is hashed before it is stored; plain-text PII never sits in the database. The DPA (Art. 28 GDPR), records of processing activities and TOMs come ready-made.
What happens if I cancel?
You get all raw data as a complete export (CSV/NDJSON) — journeys, calls, orders, everything. After that the data is deleted. No lock-in is architecture here, not marketing.
How do I know delivery really works?
Three ways: the delivery rate is shown openly in your report (measured live, not claimed). Every night a synthetic test conversion proves the entire pipeline. And the delivery check raises an alarm if a real conversion is left without a delivery result.
Read on

This goes with it.

Let's talk for 30 minutes.

We'll show you the automated checks, the delivery rate and the GDPR package live in the system — and you decide whether that's your standard for operations.

Reply within 24 hours on business days · conversations in German or English · no lock-in, cancellable monthly