Best practices for advertising on Facebook safely

Campaign structure makes a difference on Facebook. In The White Rabbit (TWR), the recommendation for anyone advertising on this traffic source is straightforward: remove the redirect between domains by using the TWR Mirror or the Unpack method, and set up your pixel so it does not expose your Offer Page URL.

Why campaign structure matters so much

Every click on your ad travels a path to the final page. The more different domains it crosses, the less control you have over that path.

Each hop is one more link in the chain, and every link carries its own history. Shorteners, shared domains, third-party intermediate addresses: you control the reputation of none of them, yet all of them are part of your ad's route. The good news is that how many links that chain has is your call.

Prefer campaigns without redirection

This applies to anything that redirects, not only to TWR: most tools on the market work by handing you a URL that jumps to another address. The fewer hops, the leaner and more predictable the path to your page.

In TWR, the default delivery method for Facebook is TWR Redirect, the most compatible one, and it works well on most traffic sources. For Facebook, use one of the two methods below on both the Safe Page and the Offer Page.

Option 1: TWR Mirror

TWR Mirror displays your page's content within the campaign URL itself: the visitor clicks the ad and the page opens at the same address you declared there, without switching domains along the way. There is a single domain involved, your campaign's, whose history you control. And your Offer Page's real address does not travel around, because only the campaign domain shows up.

To use it, select TWR Mirror in the Delivery method field, in both the Safe Page and the Offer Page sections.

Not every page works with mirroring. Pages with an embedded checkout, players restricted by domain, or scripts that depend on the original address may not load properly. Test the loading before launching your ad, with the Test Offer button inside the campaign.

Each method is detailed in Understand TWR's delivery methods.

Option 2: Unpack

Unpack is the more self-contained of the two. Instead of generating a ready-made URL, TWR generates a PHP file that you install on your own hosting, as index.php. Filtering starts happening inside your server, and the switch between Safe Page and Offer Page is resolved internally, without ever leaving your domain. Since the pages are served by your own hosting, exactly as you built them, there is no risk of loading incompatibility.

When you select Unpack in the Delivery method field, the fields for both pages start asking for the file path on your hosting instead of the URL.

The full walkthrough is in Unpack method: install the campaign on your hosting.

Which one to choose

It depends on where your pages are. If you have the Safe Page and Offer Page files on your hosting, use Unpack. If you work with URLs of pages that are not your own files, use TWR Mirror.

Set up your pixel so it does not expose the Offer Page

The delivery method takes care of the click path, but one door is still open: the Facebook pixel installed the standard way hands over your Offer Page URL on every fire, in the Referer header. And there goes all the care you took before.

The fix is one line in your Offer Page's head:

<meta name="referrer" content="no-referrer">

Your pixel keeps working the same, with the same events, and the page stops carrying its own address on every fire. The details, including the cases where you build the pixel URL by hand, are in How to install the Facebook pixel without exposing your offer page.

The rest of the checklist

Treat the Safe Page as a real page of your operation. It is the public page tied to your ad: it needs to comply with the platform's policies and be consistent with what the ad promises, in topic and in quality. An empty Safe Page, off-topic or thrown together, is the most common and the most expensive mistake. See How to create a good safe page.

Use your own clean domain. Do not reuse a domain with a bad history, and do not concentrate different operations at the same address. A problematic domain contaminates everything that goes through it.

Match the campaign targeting to the ad targeting. The countries and devices set in TWR need to match what you targeted on Facebook. The most common causes of a mismatch are in Traffic going to the Safe Page.

Test before launching the ad. Open the campaign URL to check the Safe Page, and use Test Offer to check the Offer Page. The test does not count as real traffic.

Structure does not solve everything, but it is the part entirely under your control: fewer domains in the chain, a Safe Page that stands on its own, and an Offer Page that does not expose its own address.

Updated on: 30/07/2026

Was this article helpful?

Thank you!