In 2020, Apple announced that all apps in the App Store would soon require explicit user permission to track their activity across other apps and websites. This seemingly small update, known as App Tracking Transparency (ATT), was a watershed moment for digital marketing.
From early 2021, any app that wished to track user data had to first display a prompt, asking users to opt in to tracking. Unsurprisingly, most users chose not to.
At its core, this was Apple’s move to champion privacy. But for advertisers and platforms like Facebook, it marked the beginning of a new era, one defined by data scarcity and restricted attribution visibility.
Facebook’s response
The ability to track user Events, such as clicks, purchases, or app installs, has long been central to Facebook’s advertising engine. These Events, captured via the Facebook Pixel or SDK, give advertisers the ability to optimise campaigns and target audiences based on real behavioural data.
“Without event data, Facebook’s ability to connect user intent with ad performance becomes severely constrained.”
Apple’s new rules broke this feedback loop. In essence, users who declined tracking made it impossible for Facebook to gather data on their off-platform actions.
While some marketers considered shifting focus to Android, Facebook anticipated that privacy-first policies would soon extend beyond iOS, and thus, redesigned its own systems to operate under stricter conditions.
Immediate impact for advertisers
Advertisers promoting apps or relying on conversion-based optimisation quickly noticed changes:
- Incomplete reporting due to limited event tracking.
- Reduced flexibility in measuring installs and in-app actions.
- Greater data latency, with conversions taking longer to appear in dashboards.
To adapt, Facebook introduced the Aggregated Event Measurement (AEM) protocol, a new framework that complies with Apple’s restrictions while preserving some ability to measure performance.
Key changes to events tracking
- 8-event limit per domain
Advertisers must now select up to eight events per verified domain to use for optimisation.
For global brands sharing a single top-level domain, this poses real challenges. If multiple agencies or markets operate under one domain, they must collectively prioritise which eight conversion events to keep.
“The limitation isn’t on the pixel, it’s on the domain. Coordination across teams and regions has become non-negotiable.” - Custom conversion events count individually
Custom conversions, those defined by your unique business rules, are included in the eight-event limit.
For example, if a domain tracks three pixels with 3 events each (9 total), Facebook will automatically prioritise the top eight events and pause campaigns using the 9th event. - Event prioritisation is mandatory
Only one event will be recorded per user after a click if they’ve opted out of tracking. Advertisers must therefore rank their eight events by priority.
If no prioritisation is defined before enforcement, affected campaigns will automatically pause until settings are updated.
- 3-day delay for event reconfiguration
Any change to event configurations triggers a three-day delay before campaigns resume delivery. This prevents frequent switching and ensures reporting stability.
If an account uses fewer than eight events, it won’t pause, but data will still be processed according to the ranking order.
Dealing with domain limitations
For many businesses, the domain limitation has proven to be the most pressing issue, especially for multinational brands.
Key reminders:
- The eight-event rule applies to the domain, not the pixel ID.
- Domain verification must occur at the top-level domain (e.g., brand.com).
- If multiple regions share a domain, consider transitioning to a brand.com/region or subdomain-based structure to better isolate events.
- Coordinate early with IT and web teams to map out structural changes.
- Refer to Meta’s Business Manager documentation for domain verification steps.
Navigating the shift
This change is not just about compliance—it’s a signal that data-driven marketing is entering a privacy-first era. Advertisers must now:
- Benchmark over longer periods rather than relying on short-term optimisation.
- Use performance trends instead of single-point metrics.
- Incorporate automation and machine learning tools more strategically.
“The days of hyper-granular tracking are fading. What remains is the marketer’s ability to interpret incomplete data intelligently.”
Facebook’s shift towards automated bidding and responsive ad formats reinforces this direction. For those accustomed to hands-on campaign control, the learning curve may feel steep, but it’s also an opportunity to focus less on operations and more on strategy, creativity, and brand intent.
Final thoughts
Apple’s ATT policy redefined the balance between user privacy and marketing insight. While it challenged long-held practices, it also compelled marketers to innovate.
This isn’t the end of data-driven advertising; it’s the beginning of a smarter, more transparent model where trust, context, and creativity carry greater weight than pixels and cookies.
The best marketers will not just adapt to less data, they’ll thrive with a clearer purpose.
— Terrence Quah