Skip to content

Server-side events · Platform reference

Pinterest Conversions API: events, fields and dedup rules

The Pinterest Conversions API (API v5) takes batches of web, app and offline events at /v5/ad_accounts/{ad_account_id}/events, usually alongside the Pinterest Tag. Events arrive but don't attribute when user_data is thin (no hashed email, no IP plus user agent, no _epik click ID), when the server event_id doesn't match the Tag's eventID, or when events are sent late. Pinterest asks for real time or at most one hour of lag.

Read from the official documentation on 9 November 2026. Sources are listed at the end.

Endpoint and authentication

POST https://api.pinterest.com/v5/ad_accounts/{ad_account_id}/events

Bearer token: a conversion access token (Conversions API only) or an OAuth token with at least ads:write scope

Standard event names

Spelled exactly as Pinterest expects them. A near miss is treated as a different event.

EventUse it for
checkoutpurchase/checkout; send value, currency, order_id, num_items in custom_data
leadlead
signupsign-up
add_to_cartadd to cart
add_payment_infopayment info added
page_visitpage visit
view_categorycategory view
searchsearch
watch_videovideo watch
custom event namesyour own names (case-insensitive); up to 15 custom event types per advertiser ID

Required and recommended fields

FieldWhat it needs
event_nameRequired
action_sourceRequired: app_android, app_ios, web or offline
event_timeRequired. Unix timestamp in seconds
event_idRequired. Must match the browser/app eventID for deduplication
user_dataRequired. Must include at least one of em, hashed_maids, or client_ip_address together with client_user_agent
event_source_urlFull URL path of the conversion event
opt_outWhether the user opted out of web or offline conversion events; recommended for all events
custom_data (value, currency, order_id, content_ids, num_items)value = pre-tax, pre-shipping total of purchased items

Match keys and hashing

KeyNormalise and hash
emSHA-256 of the email address in lower case
phSHA-256 of digits only (country code, area code, number); remove symbols, letters, spaces and leading zeros
lnSHA-256 of last name in lower case
geSHA-256 of f, m or n
dbSHA-256 of YYYYMMDD
ctSHA-256 of city, lowercase, no spaces or punctuation
stSHA-256 of 2-letter state code in lower case
zpSHA-256 of zip code, digits only
countrySHA-256 of 2-character ISO-3166 code in lower case
external_idSHA-256 hashed. Your user or loyalty ID
hashed_maidsSHA-256 hashed GAIDs or IDFAs (app)
client_ip_addressNot hashed. Valid IPv4/IPv6; never 0.0.0.0
client_user_agentNot hashed. Must include at least two of OS family, browser family, device family; no 'Other', null or bot user agents

Click ids

Click idWhere it comes from
click_id (epik)Cookie generated when a user clicks an ad: the _epik first-party cookie on your domain, or the &epik= query parameter in the landing URL. Pinterest points you to the _epik cookie value, which still works when the URL parameter is missing or stripped

Deduplication

Time limits and batch sizes

How to test before you trust it

Why events arrive but don't attribute

Sources

Platforms change these rules without notice. If a source says something different from this page, the source wins.

Other platforms

All platforms