Shopify GTM Server-Side + Stape Audit, Security Cleanup & Tracking Optimization

I have a Shopify-based eCommerce website currently using:

- Google Tag Manager (Web + Server)
- Stape Server-Side Tracking (Pro Plan)
- Facebook Pixel + Conversion API
- TikTok Pixel + Events API
- GA4 Tracking
- Cloudflare

The initial setup has already been completed, but before launching paid ads, I want a highly experienced professional to fully audit, secure, clean, validate, and optimize the entire tracking infrastructure.

This project is focused heavily on:
- Tracking accuracy
- Security
- Proper event deduplication
- Stable server-side architecture
- Clean access management
- Cloudflare tracking-domain validation

Current Stack:

- Shopify
- GTM Web Container
- GTM Server Container
- Stape
- GA4
- Meta Pixel + CAPI
- TikTok Pixel
- Cloudflare

Tasks Required:

1. Full Tracking Audit

- Audit complete tracking setup
- Verify GA4, Meta, and TikTok events
- Identify duplicate events, missing events, or incorrect mappings
- Verify browser + server-side event consistency
- Check Event ID matching and deduplication

2. Security & Access Cleanup (VERY IMPORTANT)

- Audit all API keys and tokens
- Safely regenerate and replace Stape API keys if required
- Review and clean unnecessary permissions/access
- Remove previous developer access where needed
- Ensure secure GTM, Shopify, Meta, TikTok, GA4, and Stape access structure
- Follow security best practices

3. Cloudflare Review & Tracking Domain Validation

- Review Cloudflare configuration related to tracking
- Verify tracking subdomain setup
- Ensure Stape custom tracking domain is correctly configured
- Check DNS, SSL, proxy, and security configuration
- Ensure Cloudflare is not interfering with server-side event delivery

4. Tracking Optimization

- Fix GA4 “unfiled items” issue
- Improve event structure
- Validate proper mapping for:
- ViewContent
- AddToCart
- InitiateCheckout
- Purchase
- Verify EMQ quality
- Optimize Meta CAPI and TikTok Events API setup
- Ensure accurate browser/server deduplication

5. Stape Custom Loader Validation

- Verify Stape Custom Loader setup
- Ensure it is correctly implemented and active
- Confirm tracking accuracy improvements

6. Testing & Verification

Must provide testing proof through:

- GTM Preview
- GA4 Realtime
- Facebook Events Manager
- TikTok Events Manager

All events must be tested and verified properly.

7. Documentation

Provide:
- Short report of issues found
- What was fixed
- Security improvements completed
- Basic explanation/guidance for future understanding

Requirements:

- Must have REAL experience with:
- GTM Server-Side
- Stape
- Shopify tracking
- Meta CAPI
- TikTok Events API
- Cloudflare tracking-domain setup

- Must show previous similar work
- Must communicate clearly
- Must work transparently
- Must avoid breaking live tracking

Important Notes:

- Limited access will be provided only where necessary
- Security is the highest priority
- Experience is more important than low pricing
- Please do NOT apply without actual GTM Server-Side + Stape experience

Please include in your proposal:

- Similar projects completed
- Your technical approach
- Estimated completion time
- Post-delivery support