Skip to main content

How Much Conversion Data Do iOS, Safari ITP and Ad Blockers Lose?

A sourced breakdown of how much conversion data browser-side pixels lose to Safari ITP, App Tracking Transparency, ad blockers and consent rejection, what server-side tracking actually recovers, and how to measure your own gap.

The EndFrame Team13 min read

In short

There is no single, universal number for how much conversion data iOS, Safari and ad blockers lose. The loss depends on your traffic mix: Safari caps script-set cookies at 7 days (24 hours after a click-ID landing), roughly 30% of internet users say they block ads, and consent rejection removes further events. Your real gap is measurable, and this guide shows how.

Most articles on this topic quote a 30-50% loss figure with no source. This one separates three kinds of claims: documented browser behaviour (WebKit's own rules), measured market data (Statcounter, survey-based ad-blocker estimates), and vendor-reported performance studies (Meta, Google). Each is labelled so you can decide how much weight to give it.

How much conversion data is actually lost?

The honest answer is a range, and the range is set by your audience, not by an industry average. Loss comes from four mechanisms that stack: Safari's Intelligent Tracking Prevention (ITP) shortening cookie lifetimes, App Tracking Transparency (ATT) removing identifiers on iOS, ad blockers preventing pixels from loading at all, and consent banners suppressing tags for people who decline. A site with 55% Safari traffic in the United States sees a very different gap from a Chrome-heavy B2B site in Germany, where consent rejection dominates instead.

ClaimType of evidenceWhat it actually tells you
ITP caps script-written cookies at 7 days, or 24 hours after link decorationDocumented browser behaviour (WebKit)Exactly what breaks in Safari and when
Safari holds about 26% of global and about 53% of US mobile browsingMeasured market data (Statcounter, August 2026)How exposed your traffic is to ITP
29.5% to 42.7% of internet users use ad blockersSelf-reported surveys (DataReportal via Backlinko; Blockthrough)An upper bound on sessions where a pixel never loads
Advertisers with Conversions API saw 17.8% lower cost per resultVendor-reported study (Meta, April 2026)Directional evidence for server-side; not independently audited
Consent Mode modeling recovers more than 70% of lost ad-click-to-conversion journeysVendor-reported claim (Google, 2021)Modeled, not observed, conversions
Pixel-only advertisers are blind to 30-50% of conversionsVendor benchmark aggregates (various tracking vendors)Unverifiable; treat as marketing

What does Safari ITP actually do to conversion tracking?

ITP blocks all third-party cookies with no exceptions, deletes cookies and storage written by JavaScript after 7 days without user interaction, and shortens that to 24 hours when the visitor arrived on a URL decorated with a click ID from a known tracker. These are WebKit's own published rules, not estimates. The WebKit tracking prevention policy describes each mechanism in detail.

ITP mechanismRule (per WebKit)Effect on attribution
Third-party cookie blockingAll third-party cookies blocked by default, no exceptionsPixels cannot read their own cross-site cookies; view-through and cross-site matching fail
Script-writable storage capCookies set via document.cookie, LocalStorage, IndexedDB and similar are deleted after 7 days of no interactionFirst-party cookies like _fbp and _ga expire in a week; conversions after day 7 look like new users
Link decoration capWhen a landing URL carries a click ID from a classified tracker domain, script-set cookies on that page expire in 24 hoursfbclid and gclid style attribution survives one day; anyone who returns later is unattributed
CNAME cloaking capCookies set in HTTP responses from third-party CNAME-cloaked subdomains expire after 7 daysPointing a subdomain at a vendor does not escape the cap

The CNAME rule matters because it closes the most common workaround. WebKit's CNAME cloaking defense announcement explains that a first-party subdomain resolving to a third-party host is treated as third-party for cookie lifetime purposes. Only cookies set by a server you actually operate keep a full lifetime.

Why every iOS browser behaves like Safari

On iOS, Chrome, Firefox, Edge and every other browser use Apple's WebKit engine, so ITP rules apply to them too. Statcounter reports the browser brand a visitor chose, so 'Chrome on iPhone' shows up as Chrome while still enforcing Safari's cookie limits. If you want to know your true ITP exposure, count iOS devices, not the Safari browser share. The EU's Digital Markets Act opened the door to alternative engines in that region, but WebKit remains the default everywhere.

How do App Tracking Transparency and Aggregated Event Measurement affect Meta reporting?

ATT removed the device identifier Meta relied on for in-app attribution unless the user explicitly opted in, and Meta responded with Aggregated Event Measurement (AEM), a protocol that limits, prioritises and partially models web conversion events from iOS users. The result is that Ads Manager numbers for iOS traffic are a mix of observed events, delayed events and statistically modeled events rather than a direct count.

  • Events from opted-out iOS users are reported in aggregate, with only the highest-priority configured event counted per visitor.
  • Reporting for these users is delayed rather than real time, so recent days always look worse than they end up.
  • Some of the reported conversions are modeled by Meta rather than observed, and Ads Manager does not separate the two in standard views.
  • Breakdowns by age, gender, region and placement are limited for iOS-attributed conversions.

This is why a first-party event stream matters even if you are happy with Meta's optimisation. It is the only view that tells you which conversions actually happened on your site, independent of what any platform chose to model.

How many people use ad blockers in 2026?

Depending on the survey, between 29.5% and 42.7% of internet users say they use an ad blocker. The spread is a methodology gap, not a real change. Backlinko's compilation cites GWI data via DataReportal at 29.5% of internet users worldwide for Q2 2025, while Blockthrough reported 42.7% as of April 2023. The Backlinko/DataReportal figure is a self-reported survey of internet users aged 16 to 64; Blockthrough does not publish per-figure methodology on the cited page, so treat the two as non-comparable. Both measure intent and awareness more than actual blocked page loads.

FigureSource and dateCaveat
29.5% of internet users worldwide use ad-blocking toolsGWI via DataReportal, Q2 2025 (cited by Backlinko)Survey-based; counts any blocker on any device
42.7% of internet users worldwide use ad blockersBlockthrough, April 2023Survey-based; earlier base and question wording
Indonesia 40.1%, USA 32.5% of internet usersDataReportal, Q2 2025 (cited by Backlinko)Regional differences are larger than year-to-year changes
US desktop 37%, mobile 15%, tablet 10%AudienceProject, 2020 (cited by Backlinko)Old, but the desktop-over-mobile pattern still holds
530 million mobile vs 290 million desktop monthly usersBlockthrough, 2023Mobile total is inflated by built-in blocking in Asian browsers such as UC Browser

Two adjustments make these numbers useful. First, survey rates overstate what a specific site sees; many people run a blocker on one desktop browser but buy from a phone. Second, most blockers stop the pixel script from loading at all, so an ad-blocked session is close to a total loss for browser-side tracking, while an ITP session is a partial loss. That is why the Conversion Recovery Calculator treats the two shares separately.

How much of your traffic runs on Safari or WebKit?

Globally, Safari holds 25.87% of mobile browsing and Chrome 66.17%, according to Statcounter for August 2026. In the United States the picture flips: Safari holds 52.84% of mobile browsing against Chrome's 41.17% (Statcounter, US mobile, August 2026). Add the iOS Chrome users who also run WebKit and a US direct-to-consumer brand should assume more than half of its mobile sessions are subject to ITP.

Your own analytics will give a better number than any global average. Segment sessions by operating system rather than browser, and weight by conversions rather than visits, because iOS users often convert at a different rate from the rest of your audience.

How much is lost to consent rejection, and what does Google model back?

When a visitor declines cookies, most tag setups stop firing conversion tags entirely, so the loss rate equals your rejection rate. Google's answer is conversion modeling through Consent Mode. In its 2021 announcement, Google stated that modeling recovers more than 70% of ad-click-to-conversion journeys lost due to user cookie consent choices. Two caveats apply. The figure is Google's own, and the recovered conversions are statistical estimates that appear in Google Ads reporting without a per-user record you can audit.

Modeled conversions help bidding algorithms. They do not help you reconcile revenue, because there is no order behind each modeled event. If you need auditable numbers, consent-compliant first-party logging of the events you are allowed to collect is the only path.

Does server-side tracking recover lost conversions?

Yes, partially, and the size of the recovery is the most over-claimed number in this category. The strongest evidence comes from Meta itself. According to PPC Land's April 2026 report on Meta's one-click Conversions API rollout, Meta stated that advertisers with a Conversions API setup for web events saw an average 17.8% lower cost per result compared with those relying on the Pixel alone. Meta has cited smaller lifts in earlier Pixel-plus-Conversions-API studies; those figures are published only in Meta Business Help Center pages, so this article does not repeat them.

Read the 17.8% carefully. It is a cost-per-result improvement, not a count of recovered conversions, and it comes from the company selling the ads. It also mixes two effects: more events reaching Meta and better match quality from hashed customer data. Independent audits of these studies do not exist.

What server-side tracking fixes and what it does not

Loss mechanismFixed by server-side sending?Why
Ad blocker stops the pixel scriptMostly, if your own first-party script still loadsConversions are forwarded from your server; the platform's script is not required
ITP 7-day and 24-hour cookie capsPartiallyServer-side gives the event a longer-lived identity, but the original click ID is still lost after the cap
ATT opt-out on iOSPartiallyHashed email or phone can rematch a user; nothing restores the device identifier
Consent rejectionNoYou may not send data the user declined; only modeling or consent-compliant events remain
Chrome with third-party cookies enabledNot neededBrowser-side pixels still work; server-side adds redundancy and deduplication

Deduplication is the non-negotiable part of any redundant setup. If the browser pixel and the server both report the same purchase, the platform must be able to match them by a shared event ID or you will double count. The server-side conversion tracking guide walks through event IDs, hashed identifiers and destination-by-destination setup.

Why Chrome's cookie reversal means loss is browser-specific, not universal

Chrome did not deprecate third-party cookies. In April 2025 Google announced it would maintain its existing approach to third-party cookie choice and would not roll out a standalone prompt (Privacy Sandbox next steps). In October 2025 it went further and retired most Privacy Sandbox APIs, including Topics, Protected Audience and Attribution Reporting, citing low adoption (update on Privacy Sandbox technologies).

The practical consequence is that a Chrome user on desktop who does not block ads is tracked roughly as well as in 2019, while an iPhone user in Safari is not. Any vendor quoting one global loss percentage is averaging across two populations that behave completely differently. Your exposure is the weighted share of your conversions that come from WebKit, ad-blocked or consent-declined sessions.

Why does Meta Ads Manager show fewer conversions than Shopify?

Ads Manager counts only the purchases it can attribute to a Meta ad within the attribution window, while Shopify counts every order. The gap combines real tracking loss with three things that are not loss at all: orders from organic, email and direct traffic; conversions outside the attribution window; and purchases from a different device than the one that clicked. A partial-match setup can also under-report if hashed identifiers are missing or malformed.

Before blaming iOS, compare the platform's count to the subset of orders whose landing session carried a Meta click ID or Meta UTM within the same window. Clean UTM discipline makes this comparison possible; the guide to fixing UTM parameters covers the naming rules that keep it reliable.

How to measure your own tracking gap

Measure the gap with three counts over one identical date range: what the ad platform reports, what your order or CRM system records, and what a first-party event stream on your own domain captured. The difference between the last two is your browser-side loss; the difference between the first and the second is attribution plus loss.

  1. 1Pick a closed 28-day window with no campaign launches or pauses in the last 7 days, so late-reported iOS events have settled.
  2. 2Export platform-attributed conversions for that window, using the same attribution setting (for example 7-day click) across every report you pull.
  3. 3Export all orders or qualified leads from the system of record and tag each with its landing source, click ID and device.
  4. 4Export conversions from your first-party event stream, keyed by the same order ID, and join the three sets on that ID.
  5. 5Calculate three ratios: platform divided by system of record, first-party divided by system of record, and platform divided by first-party.
  6. 6Segment each ratio by operating system, browser and consent status. The segments with the lowest platform-to-first-party ratio tell you which mechanism is costing the most.

There is no published benchmark for a normal discrepancy. As a working rule, most practitioners treat a platform-to-order gap of around 10-20% as expected once attribution windows and non-paid orders are removed, and investigate anything beyond that segment by segment. Treat that threshold as a starting point for your own baseline, not a measured industry fact.

Worked example with the Conversion Recovery Calculator

The Conversion Recovery Calculator takes five inputs: monthly ad spend, monthly tracked conversions, average conversion value, share of traffic on iOS, and share of traffic using an ad blocker. It applies three coefficients that are shown on screen: it assumes a browser-only pixel misses 35% of conversions on iOS traffic, misses 95% of conversions in ad-blocked sessions, and that server-side tracking recovers 85% of what was missed. These are the calculator's stated assumptions, chosen to be conservative and transparent, not measured facts about your site.

Input or outputValueHow it is derived
Monthly ad spend$30,000Your input
Tracked conversions per month600Your input, from the ad platform
Average conversion value$120Your input
iOS share of traffic50%Your input, from analytics by operating system
Ad blocker share20%Your input, or a regional survey figure as a placeholder
Blended loss rate33.2%1 minus (1 minus 0.5 x 0.35) x (1 minus 0.2 x 0.95)
Estimated untracked conversionsabout 298600 x 0.332 / (1 minus 0.332)
Recoverable with server-sideabout 253298 x 0.85
Recoverable valueabout $30,400253 x $120
Spend measured against missing dataabout $9,950$30,000 x 0.332

The point of the exercise is not the output figure. It is that changing the iOS share from 50% to 25% cuts the estimate from about 298 to about 212 untracked conversions, which tells you where to focus first. Replace the placeholder shares with your own segments from the measurement procedure above and the estimate becomes a forecast you can test against a real server-side rollout.

Where EndFrame fits

EndFrame is a first-party attribution and conversion tracking platform built around the two things this article says you need: an event stream you own, and server-side forwarding with deduplication. Its lightweight snippet records visits, actions, scroll depth and engagement time on your own domain, and stores the raw visit to action to conversion chain so the first-party count in the measurement procedure is auditable rather than modeled. Conversion goals are defined by event match or URL match, with per-campaign and per-source breakdowns.

Each server-side destination is a toggle in the dashboard: Meta Conversions API, GA4 Measurement Protocol, TikTok Events API and custom webhooks, sent with hashed identifiers and a shared event ID so browser and server events are deduplicated. There is no separate server-side tag manager container to run. EndFrame does not publish a recovery percentage of its own, because the honest number depends on your traffic mix; run the free tracking audit to see which pixels your site currently loads and get an estimate of iOS and ad-blocker exposure for your domain, then measure the gap before and after.

The bottom line

Conversion loss is real, browser-specific and measurable. The documented facts are narrow: Safari caps script-set cookies at 7 days or 24 hours after a click-ID landing, roughly a quarter of global and half of US mobile browsing runs on Safari, and somewhere between 29.5% and 42.7% of people say they block ads. Everything beyond that, including the 30-50% loss figures and the recovery percentages, is a vendor estimate. Build a first-party count, compare it to the platform and your order system over the same window, and let your own segments tell you how much you are losing and how much server-side sending gets back.

Frequently asked questions

Is the Meta Pixel dead?

No. The Pixel still works fully in Chrome on desktop and Android where third-party cookies remain enabled, and Google has confirmed it is not removing them. The Pixel is degraded on Safari and every iOS browser by ITP cookie caps and by ad blockers. Meta's recommended setup is the Pixel plus the Conversions API with shared event IDs for deduplication, not replacing one with the other.

Does the Conversions API fix iOS tracking loss?

Partially. Server-side sending lets conversions reach Meta when the pixel script is blocked, and hashed emails or phone numbers can rematch users whose cookies expired. It cannot restore a click ID that Safari deleted after 24 hours or a device identifier a user declined under App Tracking Transparency. Meta reported a 17.8% lower cost per result for advertisers with a Conversions API setup, which is a Meta-reported figure, not an independent audit.

Should I trust vendor recovery percentages?

Treat them as marketing until you can reproduce them. Claims such as 30-50% loss or 20-40% recovery are typically aggregates of customer anecdotes with no published methodology. The only recovery number that applies to you is the difference between a platform count and your own first-party count over the same date range, measured before and after you switch on server-side sending.

Why does Meta Ads Manager show fewer conversions than my order system?

Because Ads Manager counts only purchases it can attribute to a Meta ad inside the attribution window, while your order system counts everything. Part of the gap is tracking loss from ITP, ad blockers and consent rejection; part is organic, email and direct orders, cross-device purchases, and orders outside the window. Segment orders by landing click ID and operating system to separate the two.

How do I find out what share of my traffic is exposed to Safari ITP?

Segment sessions by operating system, not browser. Every browser on iOS uses WebKit and follows ITP rules, so Chrome on iPhone counts as exposed. Weight the segment by conversions rather than visits, because iOS users convert at a different rate. Statcounter's regional mobile browser share is a reasonable placeholder until you have your own data.

Try EndFrame

Recover the conversions iOS and ad blockers hide.

EndFrame collects events first-party and forwards conversions server-side to Meta, GA4, TikTok, and webhooks with event-ID deduplication — then shows the result in real time, with the visit-to-conversion path you can audit.

No credit card required

Keep reading