It sounds like your place the js file on some post-purchase page. That way when they request it you can be pretty sure they just completed the transaction.