You probably don't *need* to put it before the <body> tag. They probably just *like* it there.

You can easily drop it into your custom tpl_checkout_success_default.php template file in your custom override folder, and that will probably accomplish all they require. If you must put it elsewhere, it becomes more complicated.