Guides › Get Started
Security & access
Minimum Access Framework
How Lupe and TDS ask for only the access needed to set up and test your first-party tracking, and nothing more.
Client onboarding guide
◷ Under 5 minutes
0 of 4 steps done
Updated Nov 3, 2026
Minimum necessary access is our data minimisation framework. We ask only for the access needed to configure and test your first-party setup. In practice, that means being able to see the events your website sends to each platform.
Your part
- Share only the access listed for each platform, from your own account
- Check our partner details against each request
- Remove our access whenever you like
Our part
- Connect your server container and check that events arrive at each platform
- Ask for admin access only if you request support with a specific task
- Show you an aggregated, anonymised analytical view
Before you start
- Understand that you retain admin rights on each platform you are setting up with us. You stay in control throughout.
- Never give passwords or login information to anybody - we will never ask for these.
- Prepare a list of the platforms you want to connect (for example Shopify, Meta or TikTok).
Your steps
1
Your part
Open the guide for each platform that is relevant to your setup
Each platform has its own step-by-step guide:
2
Your part
Check our partner details
When you see a request or search for us in your account, compare it with the partner details below. Only continue if they match.
4
Your part
Remove our access when you no longer need us
You can remove our access at any time. Every platform guide shows where to see and remove it.
What we ask for
| Platform | What we ask for | What we don't access |
|---|---|---|
| Shopify | Collaborator access with four permission areas | Orders, products, customer lists, payments or staff accounts |
| WordPress | No login: you install the Stape plugin yourself | Orders, customers, payments, pages and theme |
| Meta | ✓ Full control of one dataset | Other datasets, ad accounts, Pages, Instagram, catalogues, billing, portfolio settings |
| TikTok | ✓ Edit pixels on one pixel | Other pixels, advertiser accounts, catalogs, shops, billing, Business Center settings |
| Google Ads | ✗ No access. You approve a GA4 link and send us a conversion ID and label | Your whole Google Ads account: campaigns, budgets, spend, billing and leads |
| Google Analytics 4 | ✓ Editor on one property | Other properties, users and permissions, account settings |
| ✓ Campaign Manager on one ad account | Other ad accounts, company pages, billing | |
| ✓ Analyst on one ad account | Campaigns, billing, profiles, catalogs, audiences | |
| ChatGPT ads (OpenAI) | ✓ Member on one advertising account | Account administration, other advertising accounts, ChatGPT workspaces |
Shopify
| Shopify area | Permission | Why we need it |
|---|---|---|
| Store settings | Manage settings | Gives access to Customer privacy, so we can configure Shopify's default cookie banner in consideration of your chosen consent platform. |
| Store settings | View customer events; Manage and add custom pixels | Lets us configure checkout events to your server-side container. |
| Apps and channels | Manage and install apps and channels | Lets us configure the Stape app once you've installed it. |
| Online store | Themes: edit code | Lets us switch on the Stape app embed, configure your consent banner script with the theme, and isolate the location of old, non-compliant or conflicting tracking scripts. |
Meta
| Area | Access | What that means |
|---|---|---|
| Your chosen dataset | ✓ Full control | View incoming events, run test events, check deduplication and event quality, adjust advanced matching and event settings, and connect your server container (Conversions API). |
| Other datasets or pixels | ✗ No | Only the one dataset you assign. |
| Ad accounts | ✗ No | No customer or lead information, campaign access, budgets or ad performance. |
| Facebook Pages and Instagram | ✗ No | No posting, messages or community management. |
| Catalogues | ✗ No | No changes to products or product sets. |
| Billing and payments | ✗ No | No payment methods, invoices, spend or credit lines. |
| Business portfolio settings | ✗ No | No access to your people, other assets or partners. |
TikTok
| Area | Access | What that means |
|---|---|---|
| Your chosen pixel | ✓ Edit pixels | View incoming events, run test events, check deduplication and event quality, and connect your server container (Events API). |
| Other pixels | ✗ No | Only the one pixel you share. |
| Advertiser (ad) accounts | ✗ No | No customer or lead information, campaign access, budgets or ad performance. |
| Catalogs and shops | ✗ No | No changes to products or shops. |
| Billing and payments | ✗ No | No payment methods, invoices or spend. |
| Business Center settings | ✗ No | No access to your members, other assets or partners. |
Our partner details
Check these against any request you see in your accounts.
| Platform | Partner name | ID |
|---|---|---|
| Meta | Lupe \ | TDS |
| TikTok | Lupe \ | TDS |
| Google Ads | – | No access needed: you send a conversion ID and label |
| Google Analytics 4, ChatGPT ads | Lupe analytics | analytics@lupedata.com |
| LinkedIn, Pinterest | Lupe \ | TDS |
| Shopify | Lupe Data \ | TDS |
What happens next
- We use the access you granted to connect your server container.
- We check that the events arriving at each platform are correct, using test events.
- We show you an aggregated, anonymised analytical view in Lupe.
- We only ask for admin access if you request support with a specific task or troubleshooting session.
Good to know
- You stay in control. Lupe and TDS never own or control your datasets or ad accounts. Lupe is a dashboard layer: all processing happens in accounts that you own.
- No ad account, order or financial data. We don't get access to your campaigns and budgets, order information, customer lists, billing or financial information.
- Aggregated views only. Lupe doesn't store or use your platform data, except to show you an aggregated and anonymised analytical view.
- Test events. When we run test events, we see the event details the platform shows for that test traffic. Personal details such as email addresses are hashed (scrambled) before they reach Meta or TikTok. We don't download or keep any of your event data.
- Legal terms. These permissions are set out in Annex D of our Data processing agreement. See also our Privacy policy.