Analytics and site verification with consent

Analytics & Verification (Baza Helper > Analytics & Verification) loads analytics and marketing scripts only when you switch them on and, by default, only after the visitor agrees. Disabled providers load no scripts. The tool reports configuration, not traffic or revenue: no provider API is connected.

Site verification

Paste the token of each service in Site Verification: Google Search Console token, Bing Webmaster Tools token, Pinterest token, or a Custom verification meta name with its Custom verification token.

General settings

• Enable tracking manager is the master switch.
• Require consent before provider loading is on by default. Connect your own banner to ULPTracking.setConsent(), or use the built-in Cookie banner.
• Administrator-only event debugger shows what a click or submit would send without sending it or leaving the page.
• Enable scroll-depth events.
• Track forms automatically sends form events (see below).
• Consent-based attribution keeps the first touch for 30 days.
• Primary delivery mechanism: Direct providers, or GTM (direct GA4 and Ads disabled).

Providers

• Google Analytics 4: Enable GA4, the GA4 Measurement ID (G-…) and Enhanced measurement compatibility.
• Google Tag Manager: Enable GTM and the GTM Container ID (GTM-…). Tick GA4 is already deployed through GTM to disable the direct GA4. Choose the Consent category required by this GTM container: marketing, or analytics for analytics-only tags. If GA4 is set up both directly and through GTM the tab warns that page_view may be sent twice.
• Meta Pixel: Enable Meta Pixel, the Meta Pixel ID and an optional Meta event mapping (JSON object).
• Microsoft Clarity: Enable Clarity and the Clarity Project ID.
• Google Ads: the Conversion ID (AW-…), the Conversion Label and the mapped events, comma separated.

Other scripts

Under Advanced: external tracking scripts (Pro package only) you can add up to 10 other scripts, each by HTTPS address, with an optional integrity hash (a Subresource Integrity value) and the consent they run after: Analytics or Marketing. The address must be a real domain on the standard port: no IP address, no localhost and no user name in it. The integrity hash starts with sha256-, sha384- or sha512-. No inline JavaScript is accepted, and a script loads only after the visitor consents to its category. The section needs both manage_options and unfiltered_html. An external script runs with access to the page and may collect data on its own, so add only audited resources you trust. The built-in providers (Google Analytics 4, Google Tag Manager, Meta Pixel and Microsoft Clarity) are in every version and need no such list.

Which events are sent

• Forms: with the forms switch on, any form except search, login, register, comments, cart and checkout sends form_start on the first input and form_submit on submit. Contact Form 7, Elementor Forms, WPForms, Gravity Forms, Fluent Forms, Forminator, Formidable, HubSpot and Mailchimp for WP report the result as form_success with generate_lead, or form_error. Mark generate_lead as a key event in GA4 (Admin > Events).
• Your own events: add data-track-event="my_event" and, if you like, data-track-id="header" to any button or link, or call ULPTracking.emit( 'my_event', { id: 'header' } ). An event name is lowercase letters, digits and underscores.
• Check it: switch on the event debugger, then click or submit. The window shows what each service would have received, and the action is not counted.

The tab also has a text written for an AI assistant: copy it, paste it with your page and the assistant adds the tracking tags for you.