Itutin Server-Side Signal Conduit · IsraSky
English EN
Connect Site

ITUTIN · SECTION 11 GATE & SERVER-SIDE SIGNAL CONDUIT

Every lead and purchase reaches Meta and Google. Server-to-server under Amendment 13.

Itutin replaces fragile browser pixels with a verifiable server-to-server conduit: capturing WordPress forms, ILS WooCommerce orders, and qualified Lidin CRM deals, enforcing the Section 11 notice gate, hashing PII in SHA-256, and issuing a stamped 200 OK delivery receipt.

Request Site Connection Transparent ILS Pricing →
  • 15-minute live setup Turnkey WordPress & WooCommerce plugin or signed CRM webhook without renting a cloud GTM server
  • Section 11 vs. Cookie separation Delivers user-initiated inquiries lawfully without bypassing refusal of behavioral tracking
  • SHA-256 & event_id deduplication One-way server-side hashing and deterministic deduplication with browser pixels
Origin · WordPress + Lidin CRM Quote request form · Ad cookies: declined · Section 11 notice: displayed
Lead Event
Event #evt_9f4a2c08 · SHA-256 Live Simulation · Amendment 13

Website Form Lead (Ad Cookies Declined)

Legal basis: inquiry fulfillment at user request + visible Section 11 notice
Server Delivery Status Delivered to Meta & Google
DELIVERED 200 Meta CAPI · Google API
Channel 1 · Browser Pixel ✕ Blocked by Banner
Channel 2 · Itutin Server (S2S) ✓ Delivered Server-Side
  1. Captured form & verified Section 11 disclosure flag sec11_notice: true
  2. Normalized phone/email & computed SHA-256 hash em: 8f3c..91a2
  3. Dispatched to Meta Conversions API (with event_id) HTTP 200 · 1 rcvd
  4. Dispatched to Google Data Manager API HTTP 200 · SUCCESS
Delivery receipt stamped · Conversion attributed despite browser cookie refusal dedup_key: evt_9f4a2c08
Switch dossier tabs to inspect how the server gate handles each scenario
Supported signal origins:
  • WordPress · Elementor / CF7 / WPForms
  • WooCommerce · Purchase (ILS)
  • Lidin CRM · לידין
  • Chatin · צ׳אטין (AI & WhatsApp)
  • Webhook · HMAC-SHA256

SECTION 02 · WHERE 40% TO 65% OF CONVERSIONS DISAPPEAR

When a compliant cookie banner blocks the pixel, your ad campaigns fly blind

Since Israel’s Amendment 13 to the Privacy Protection Law took effect in August 2025, websites must block browser ad tags until explicit consent is granted. Click any failure point below to inspect what breaks in the browser:

  • 01
    62% of visitors decline or dismiss the cookie banner A prospect submits a real lead form on your site, but the browser pixel is muted: Meta and Google record 0 conversions.
  • 02
    AdBlockers and Safari / iOS ITP sever browser scripts Even when cookies are accepted, client-side blockers drop fbevents.js and gtag.js on WooCommerce checkout pages.
  • 03
    Deals close in CRM two days after the browser tab is gone A browser pixel has no way of knowing which Lidin CRM inquiry became a paying client and which was spam.
  • 04
    Standard pixels leak cart item names and unhashed PII Broadcasting raw product titles or unhashed phone numbers from the browser exposes the business to Amendment 13 liability.
  • 05
    Improvised server scripts double-count every conversion Without a deterministic event_id shared between browser and server, every lead is counted twice and distorts bidding.
Browser Cookie Banner Log · Recent Leads COOKIE_CONSENT_LOG
Website Lead #108 Cookies: Declined Pixel: 0 reported
Website Lead #109 Cookies: Declined Pixel: 0 reported
Order 640 ₪ #110 AdBlock Active Pixel: Network Drop
Client Browser Network Failures (DevTools) NETWORK_DROP
connect.facebook.net/fbevents.js ERR_BLOCKED_BY_CLIENT
googletagmanager.com/gtag/js CONSENT_DENIED_WAIT
Safari ITP · 3rd-party cookies Purged after 24 hours
Gap Between Browser Tab and Lidin CRM OFFLINE_CRM_GAP
Sun 10:15: Prospect submits phone number on site and closes the browser tab.
Tue 15:40: Deal marked Won in Lidin CRM (2,400 ₪). The browser pixel is long gone.
Campaign Manager Without Server Conduit BLIND_ROAS
Actual leads in CRM: 48 · Attributed in Meta / Google Ads: only 19
Amendment 13 Warning Never broadcast raw cart item names or unhashed phone numbers from the browser without a Section 11 gate.

SECTION 03 · THE PATH OF ONE SIGNAL ACROSS 5 SERVER STATIONS

One continuous conduit: from pressing “Submit” to a stamped 200 OK receipt

Every event passes through five server-side verification stations. Scroll or click any station below to inspect the live packet transformation:

  1. 01
    T+0.00s · INGEST

    Ingest from WordPress, WooCommerce, or Lidin CRM

    Our WordPress plugin captures form submissions (Elementor, Contact Form 7, WPForms), paid WooCommerce orders, or stage updates from Lidin CRM and signed webhooks.

    source: wp_plugin | woocommerce | lidin_crm
  2. 02
    T+0.04s · SECTION 11 GATE

    Section 11 Legal Gate Verification

    The server classifies the event: passive PageViews without cookie consent are halted immediately. Leads and purchases proceed only when the Section 11 disclosure flag is present.

    basis: inquiry_fulfillment · sec11_shown: true
  3. 03
    T+0.11s · SHA-256 & SCRUBBING

    Cart Privacy Scrubbing & One-Way SHA-256 Hashing

    Phone and email are normalized and hashed into one-way SHA-256 digests before leaving the server. For WooCommerce orders, only the ILS total is sent: never cart item names.

    sha256(phone, email) · cart_items: scrubbed
  4. 04
    T+0.18s · DEDUPLICATION

    Deterministic Deduplication via event_id

    Every event receives a deterministic event_id key. If the visitor granted cookie consent and both browser and server channels fire, Meta and Google merge them into a single conversion.

    event_id: evt_9f4a2c08 · dedup: ACTIVE
  5. 05
    T+0.39s · DISPATCH & RECEIPT

    Parallel Dispatch to Meta & Google + 72h Retry Queue

    The packet is delivered to Meta Conversions API and Google Data Manager API. If an endpoint is momentarily unreachable, the server queue retries automatically for up to 72 hours.

    Meta CAPI: 200 OK · Google API: 200 OK
LIVE SERVER PACKET INSPECTOR STATION 01 / 05 · ACTIVE
01 · Source Ingest source: wp_plugin | woocommerce | lidin_crm Event captured on server alongside click identifiers (fbc / gclid)
02 · Section 11 Gate (Amendment 13) basis: inquiry_fulfillment · sec11_shown: true Strict separation between behavioral tracking and inquiry fulfillment
03 · SHA-256 & Cart Scrubbing sha256(phone, email) · cart_items: scrubbed Zero cleartext PII storage · automatic purge within 7 days
04 · Deduplication Key (event_id) event_id: evt_9f4a2c08 · dedup: ACTIVE Prevents double-counting in ROAS and CPA reporting
05 · Stamped Delivery Receipt (200 OK) Meta CAPI: 200 OK · Google API: 200 OK Logged in the Itutin dashboard in 4 languages (HE, AR, RU, EN)

SECTION 04 · INTERACTIVE ITUTIN CONTROL PANEL & CONNECTORS

Complete delivery visibility for both business owners and campaign managers

Instead of an opaque GTM container, you get a 4-language live delivery ledger. Filter by signal origin or toggle between Business Owner and Engineer views:

Filter stream:
View mode:
Server Signal Ledger · Connected Domain
Meta CAPI + Google API · CONNECTED
Signal Origin Event & Section 11 Basis Meta CAPI Google API Key / Value
Elementor Website Form
New Lead (No ad cookies · Sec. 11 notice shown)
✓ Delivered 200
✓ Delivered 200
Verified Lead
WooCommerce Store
Paid Order (Total only · cart items scrubbed)
✓ Delivered 200
✓ Delivered 200
480 ₪ (ILS)
Lidin CRM (לידין)
Lead verified by sales team as Qualified Deal
✓ Delivered 200
✓ Delivered 200
CRM Deal Won
Visitor Browser (PageView)
PageView without cookie consent (held by gate)
⊘ Skipped Lawfully
⊘ Skipped Lawfully
Not Sent
Mobile Summary · Itutin LIVE
Owner Daily Delivery Digest
Delivered Server-Side Today 38 Leads & Orders
Website Forms (Sec. 11) 21 delivered
WooCommerce Orders 11 delivered
Lidin CRM Deals 6 delivered
✓ 14 conversions rescued from cookie banner refusal & AdBlock today
CONNECTOR 01 · WORDPRESS

WordPress & Form Builders

Connects in 15 minutes to Elementor Forms, Contact Form 7, and WPForms without editing theme templates or renting a cloud GTM server.

Elementor · CF7 · WPForms
CONNECTOR 02 · WOOCOMMERCE

WooCommerce eCommerce (ILS)

Server-side delivery of AddToCart, InitiateCheckout, and Purchase events with order total and ILS currency while scrubbing cart item names.

WooCommerce · Purchase (ILS)
CONNECTOR 03 · LIDIN CRM & CHATIN

Native Lidin CRM & Chatin Link

Feed ad algorithms with verified customers rather than raw form spam by sending qualified Lidin CRM stages and Chatin AI / WhatsApp leads to Meta and Google.

Lidin CRM · Chatin -> Meta & Google
CONNECTOR 04 · WEBHOOK API

Signed Webhook (HMAC-SHA256)

Hardened server endpoint for custom websites, landing pages, and external CRMs with cryptographic signature verification.

POST /v1/webhooks/events

SECTION 05 · AMENDMENT 13 & 2017 DATA SECURITY REGULATIONS

Engineered for Israeli privacy compliance from the ground up

Itutin never transmits cleartext PII and never circumvents a visitor’s refusal of behavioral cookies. Every stage of the pipeline is documented under Amendment 13:

  • CLAUSE 01 · BASIS SEPARATION
    Behavioral cookies by consent · Leads under Section 11 notice Passive page views (PageView) are never sent without cookie consent. Form leads and orders are delivered under inquiry fulfillment with a visible Section 11 notice.
  • CLAUSE 02 · ONE-WAY HASHING
    Standardized SHA-256 hashing before server egress Phone numbers and email addresses are normalized and hashed into one-way SHA-256 digests on the server before transmission to Meta and Google.
  • CLAUSE 03 · CART PRIVACY
    Scrubbing of product titles and free-text fields Purchase events transmit only the order total and ILS currency. Free-text message bodies and sensitive cart item names are stripped automatically.
  • CLAUSE 04 · AUTO-PURGE TTL
    Retained strictly for delivery completion (max 7 days) Hashed contact payloads remain in the retry queue only until a 200 OK receipt is confirmed and are automatically purged within 7 days max.
  • CLAUSE 05 · TENANT ISOLATION
    Isolated signing keys and encrypted OAuth tokens Each connected domain operates with a dedicated HMAC signing key and encrypted OAuth tokens that can be revoked and wiped at any time.
  • CLAUSE 06 · READY DISCLOSURES
    Ready-to-paste Section 11 notices in 4 languages (HE, AR, RU, EN) Every plan includes lawyer-vetted two-layer Section 11 disclosure snippets in Hebrew, Arabic, Russian, and English for your website forms.

Scenario Comparison: Standard Browser Pixel vs. Itutin Server-Side Pipeline

Website / Business Scenario Standard Browser Pixel Itutin Server-Side Pipeline
Visitor declines ad cookies but submits a contact form (with a visible Section 11 notice) Blocked: conversion is lost for Meta and Google Delivered server-to-server under inquiry fulfillment & Section 11 notice
Visitor browses site pages (PageView) without granting cookie consent Blocked by cookie consent banner Skipped by consent: Itutin never bypasses refusal of behavioral tracking
Customer completes a WooCommerce Purchase (in ILS) with an active ad blocker Script blocked in browser, revenue missing from reports Delivered server-side with ILS order total after SHA-256 hashing
Sales team marks a lead as Qualified or Won inside Lidin CRM Browser tab is closed: pixel cannot see offline CRM stages Delivered directly from CRM to Meta CAPI and Google Data Manager API

SECTION 06 · 3-STEP CONNECTION PROTOCOL & APPROVED TARIFF SCHEDULE

Transparent ILS pricing (VAT included) with zero hidden add-ons

Deployment takes 15 minutes at a flat rate per domain. Connect free using our step-by-step wizard or request turnkey setup by IsraSky engineers:

  1. 1
    Minutes 0–5 · Plugin & Sec. 11

    Install the plugin and place the Section 11 notice

    Install our WordPress / WooCommerce plugin (or connect a CRM webhook) and paste the ready Section 11 disclosure snippet beneath your form.

  2. 2
    Minutes 5–10 · API Handshake

    Authorize Meta CAPI and Google in one click

    Link your Meta Dataset / Pixel and Google Ads conversion actions. Deterministic event_id deduplication is enabled automatically.

  3. 3
    Minutes 10–15 · 200 OK Receipt

    Send a test event and verify your stamped receipt

    Submit a test inquiry on your site and immediately confirm the 200 OK delivery receipt in the Itutin dashboard and Events Manager.

Billing cycle:

Service Website

For corporate sites, clinics, law firms, consultants, and service providers

Up to 500 server events / mo
99 ₪ per month (incl. VAT) Annual billing: 990 ₪ / year (equivalent to 82.5 ₪ / month)
  • 1 website domain and up to 500 server events per month
  • Lead forms, quote requests, callback widgets, and inquiries
  • Simultaneous delivery to Meta Conversions API and Google Data Manager API
  • Automatic browser-to-server deduplication via event_id
  • Ready-to-use Section 11 notice text for placement beneath forms
  • Transparent delivery ledger with 4-language status labels (HE, AR, RU, EN)
Select Service Website Plan
RECOMMENDED FOR STORES & CRM

Online Store

For WooCommerce stores, eCommerce sites, and high-volume lead pipelines

Up to 2,000 server events / mo
199 ₪ per month (incl. VAT) Annual billing: 1,990 ₪ / year (equivalent to 165.8 ₪ / month)
  • 1 store domain and up to 2,000 server events per month
  • All features included in the Service Website plan
  • Full WooCommerce events: AddToCart, InitiateCheckout, and Purchase
  • Order value and ILS currency delivery for ROAS bidding optimization
  • Cart privacy filter: sends order total only, without product names
  • Priority delivery queue with automatic retries for up to 72 hours
Select Online Store Plan
INITIAL CONNECTION & ONBOARDING OPTIONS

Self-Serve Wizard Connection

0 ₪

Guided step-by-step setup wizard (under 15 minutes): install the plugin, connect Meta and Google accounts, and verify a live test event.

Turnkey Setup (“We Connect It For You”)

990 ₪ one-time

IsraSky engineers install the plugin, configure Meta CAPI and Google conversions, place the Section 11 notice beneath your forms, and verify live delivery. Included free (0 ₪) for IsraSky M and L website maintenance clients.

SECTION 07 · OPEN A CONNECTION DOSSIER

Request Site Connection or Pilot Launch

Leave your website URL and contact details. We will inspect your forms, WooCommerce checkout, or CRM pipeline and prepare your server-side connection.

  • Engineering review of your current forms and cookie consent banner
  • Tailored Section 11 disclosure snippet in Hebrew, Arabic, Russian, or English
  • No long-term lock-in · instant token revocation and data deletion anytime

IsraSky Engineering Support

Itutin is built and maintained in Israel (Petah Tikva) by the IsraSky engineering team. For any technical or compliance questions, you can also reach us directly by email:

it@israsky.com
CONNECTION REQUEST · ITUTIN-REQ
Who receives your data and what is transmitted (Notice under Section 11 of the Privacy Protection Law)

Providing the details in this form is voluntary and used to contact you and connect your website to the Itutin service; you are under no statutory obligation to provide them, but without a name, website URL, and contact phone or email we cannot process or respond to your request.

Database controller for inquiries on this website: Israsky (Ilia Shuliak, licensed dealer עוסק מורשה 324648047, Petah Tikva, Israel). To exercise your right to inspect, correct, or delete personal data under Sections 13 and 14 of the Privacy Protection Law, contact it@israsky.com. Full details are available in our Privacy Policy.

Providing these details is voluntary, but without them we cannot process your inquiry; the information will be used to respond to your request and record it in Israsky’s inquiry database. Your rights to access and rectify data and controller contact details are set out in our Privacy Policy.