Tag management systems

Stape

Server side tag management from Estonia

EstoniaEUEU hostedFree plan Ownership reviewed, controller unresolvedHigh non-EU dependency

Scope verdict

Ownership reviewed, controller unresolved

This service remains visible for context, but it is not counted or recommended as a European-controlled option.

How we classify services

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 5 non-European infrastructure or email dependencies across 4 providers: Cloudflare, Google, Mailgun, Zendesk. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

Stape is a tag management system from Estonia. It hosts fully managed server side Google Tag Manager containers, which connect to the server containers in your own GTM account and are configured there. Templates are provided for common destinations such as Google Analytics and the Facebook Pixel.

Containers can be hosted in Europe, and if you select the EU during registration the containers and the backend API run on Scaleway. Stape can also remove personally identifiable information before data is forwarded, which makes it a European alternative for marketing teams that need server side tagging with control over what leaves their infrastructure.

Pricing

The free plan includes one server and 10,000 requests. The first paid plan costs EUR 20 per month for three servers and 500,000 requests.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Public website

Cloudflare

Non-European provider
Observed
A 104.17.94.19, 104.17.95.19 · AS13335

Why this matters

Public DNS routes website visits through Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Incoming business email

Google Workspace

Non-European provider
Observed
MX 1 aspmx.l.google.com · 5 alt1.aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 alt3.aspmx.l.google.com · 10 alt4.aspmx.l.google.com

Why this matters

Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

Google Workspace

Non-European provider
Observed
SPF _spf.google.com

Why this matters

This domain authorises Google Workspace to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Zendesk

Non-European provider
Observed
SPF mail.zendesk.com

Why this matters

This domain authorises Zendesk to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Mailgun

Non-European provider
Observed
SPF mailgun.org

Why this matters

This domain authorises Mailgun to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More from Estonia