Book a call
Client access guide

How to Add a DNS Record or Give Cloudflare DNS Access

Server-side tracking runs on a subdomain of your website, for example data.yourdomain.com. That needs one or two DNS records at the company that manages your domain. The easiest and safest option is that you add the record I send you; the other option is to invite me to Cloudflare with a DNS-only role.

Cloudflare & DNS About 5 minutes Preferred: no access (you add the record). If inviting: Domain DNS, scoped to your domain only
Invite this emailanalyticsbychamok@gmail.com

Before you start

  • A login to wherever your domain's DNS is managed (Cloudflare, GoDaddy, Namecheap, Hostinger or similar)
  • For a Cloudflare invite: the Super Administrator role on the Cloudflare account and a verified email address
  • The record details I send you (type, name and value)

Why I need this access

  • 01 Point a tracking subdomain such as data.yourdomain.com to your Stape server so tracking is first-party
  • 02 First-party tracking is less affected by ad blockers and browser limits, so you see more of your real conversions
  • 03 Verify the subdomain so Stape can issue a secure (HTTPS) certificate for it
  • 04 I never need to change your website, email or other DNS records

Which role to choose

Preferred: no access (you add the record). If inviting: Domain DNS, scoped to your domain only. One record is quick to add yourself, so I do not need any access. If you would rather I do it, the Domain DNS role lets me edit DNS records for the chosen domain only, without access to billing, members or other domains.

What I needNo access (you add the record)You paste the record I send; I verify it from my side
What I needDomain DNS (scoped to one domain)Edit DNS settings for the selected domain only
Also worksDNS (account-scoped)Edit DNS records for all domains in the account
Not enoughDomain AdministratorFull access to the selected domains
Not enoughAdministrator Read OnlyView the whole account, no changes
Not enoughAdministratorFull account access except members and billing profile
Not enoughSuper Administrator - All PrivilegesEverything, including billing and members

Step by step

Option A: nothing — I send you the exact DNS record to add. Option B (Cloudflare invite): analyticsbychamok@gmail.com

  1. 1

    Get the record from me

    I send you the exact record from Stape: usually a CNAME with a name like "data" and a value that Stape gives me. Copy it exactly.

  2. 2

    Open DNS Records

    Cloudflare dashboardYour domainDNSRecords

    Log in to Cloudflare, click your domain and open "DNS" then "Records".

  3. 3

    Add the record

    DNSRecordsAdd record

    Click "Add record", choose the "Type" I sent (usually CNAME) and paste the "Name" and "Target"/value.

  4. 4

    Turn the proxy off

    Proxy statusDNS only

    Click the orange cloud so "Proxy status" shows "DNS only" (grey cloud), unless I tell you otherwise. Stape needs this to verify the domain. Click "Save".

  5. 5

    Tell me it is done

    Send me a message. Verification usually takes a few hours and can take up to 72 hours with some providers.

After you send the invite

  • I check the record from Stape and confirm when the subdomain is verified and secure.
  • To remove my Cloudflare access later: "Members", find my row, click "..." and choose "Remove member", then confirm.
  • Keep the tracking DNS record after the project; removing it stops server-side tracking.
FAQ

Cloudflare & DNS access: common questions

Will this affect my website or email?

No. A new subdomain record is separate from the records for your website and email, as long as nothing existing is changed.

Why not use sgtm or tracking in the subdomain name?

Stape advises avoiding words like tracking, analytics, gtm or sgtm because ad blockers may block them. A neutral name like data works better.

How do I know where my DNS is managed?

It is usually where you bought the domain, unless you moved it to Cloudflare. Tell me your domain and I can check which company manages it.

Why does Stape say the domain is not verified yet?

DNS changes can take time to spread. It usually takes a few hours and can take up to 72 hours. Also check the proxy is set to DNS only.

More guides

Other access guides

Google Tag Manager Publish (on each container) + User (account)About 2 minutesGoogle Analytics 4 Editor (property level)About 2 minutesGoogle Ads StandardAbout 2 minutesGoogle Search Console FullAbout 2 minutesGoogle Merchant Center Standard + Performance and insightsAbout 2 minutesMeta Business portfolio Dataset: Full control ("Manage events dataset") + Ad account: Partial access ("Manage campaigns" and "View performance")About 5 minutesTikTok Business Center Business Center: Standard member + Pixel: editing permission + Ad account: OperatorAbout 5 minutesShopify Collaborator account with: Themes + Edit code, Apps, Manage settings, View customer events + Manage and add custom pixels, MarketingAbout 5 minutesWordPress & WooCommerce AdministratorAbout 3 minutesWix Admin (Co-Owner)About 3 minutesMicrosoft Clarity Team memberAbout 1 minuteStape Shared access to your containers (billing left unticked)About 2 minutesGoHighLevel Admin role (sub-account), or User with Funnels, Automation and Integrations switched onAbout 3 minutes

Ready to start your project?

Get a free audit of your tracking and ad account. Usually replies within 1–2 hours.

Book a free audit call Chat on WhatsApp