Adds the guided read-only GA4 dashboard while preserving existing tracking. Review the Google Cloud setup, installation-mode, privacy, and external-service guidance.<\/p>"},"ratings":{"1":0,"2":0,"3":0,"4":0,"5":"3"},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":1804841,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":1804841,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":1804845,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":1804845,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.1","1.1.0","1.1.1","2.0.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3625295,"resolution":"1","location":"assets","locale":"","width":1265,"height":712},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3625295,"resolution":"2","location":"assets","locale":"","width":1265,"height":712},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3625295,"resolution":"3","location":"assets","locale":"","width":1265,"height":712}},"screenshots":{"1":"The connected Free Analytics dashboard shows key metrics, a seven-day traffic trend, numeric scale, and combined daily values.","2":"Guided read-only Google connection explains data access and managed authorization before the administrator proceeds.","3":"Tracking settings support Google tags, Google Tag Manager containers, additional destinations, Consent Mode v2 defaults, and explicit installation modes."}},"plugin_section":[],"plugin_tags":[223629,193472,1005,233857,23294],"plugin_category":[36],"plugin_contributors":[150144],"plugin_business_model":[],"class_list":["post-79023","plugin","type-plugin","status-publish","hentry","plugin_tags-consent-mode","plugin_tags-ga4","plugin_tags-google-analytics","plugin_tags-google-tag","plugin_tags-google-tag-manager","plugin_category-analytics","plugin_contributors-digitalapps","plugin_committers-digitalapps"],"banners":{"banner":"https:\/\/ps.w.org\/wp-global-site-tag\/assets\/banner-772x250.png?rev=1804845","banner_2x":"https:\/\/ps.w.org\/wp-global-site-tag\/assets\/banner-1544x500.png?rev=1804845","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/wp-global-site-tag\/assets\/icon-128x128.png?rev=1804841","icon_2x":"https:\/\/ps.w.org\/wp-global-site-tag\/assets\/icon-256x256.png?rev=1804841","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/wp-global-site-tag\/assets\/screenshot-1.png?rev=3625295","caption":"The connected Free Analytics dashboard shows key metrics, a seven-day traffic trend, numeric scale, and combined daily values."},{"src":"https:\/\/ps.w.org\/wp-global-site-tag\/assets\/screenshot-2.png?rev=3625295","caption":"Guided read-only Google connection explains data access and managed authorization before the administrator proceeds."},{"src":"https:\/\/ps.w.org\/wp-global-site-tag\/assets\/screenshot-3.png?rev=3625295","caption":"Tracking settings support Google tags, Google Tag Manager containers, additional destinations, Consent Mode v2 defaults, and explicit installation modes."}],"raw_content":"\n
WP Global Site Tag provides two related tools without mixing their state:<\/p>\n\n
You can use either tool independently. Connecting Analytics never enables tracking or silently replaces an existing tag.<\/p>\n\n
GT-<\/code>, G-<\/code>, AW-<\/code>, and DC-<\/code> identifiers through gtag.js.<\/li>\n- Official Google Tag Manager head and body snippets for
GTM-<\/code> identifiers.<\/li>\n- Existing legacy
UA-<\/code> tracking IDs remain visible and continue rendering, including when Google routes the installed tag to a connected GA4 destination.<\/li>\n- Multiple Google tag destinations and optional Consent Mode v2 denied defaults.<\/li>\n
- Backward compatibility for existing trusted custom gtag commands.<\/li>\n<\/ul>\n\n
Settings are available under Settings > WP Global Site Tag<\/strong>. The Analytics dashboard<\/strong> tab contains the recommended connection route. The Tracking settings<\/strong> tab preserves the manual route.<\/p>\n\nRecommended Google connection<\/h4>\n\n
Click Connect with Google<\/strong>, choose an account, approve read-only Analytics access, and return to WordPress to choose a property and website data stream. The recommended connection uses the Digital Apps connection service so administrators do not need to create a Google Cloud project or handle OAuth credentials.<\/p>\n\nDigital Apps exchanges the authorization code and retains the Google refresh token while the connection is active. WordPress stores an encrypted opaque connection token and short-lived Google access tokens. The plugin then calls the Google Analytics Admin and Data APIs directly, so Analytics property, stream, and report requests and responses do not pass through Digital Apps.<\/p>\n\n
Because Digital Apps retains the refresh token, it is technically able to request Analytics access while the connection remains active. The advanced self-managed route below is available for administrators who do not accept that trust boundary.<\/p>\n\n
Administrators who require no Digital Apps token custody can open Advanced: use your own Google OAuth application<\/strong>. That route provides the Google Cloud instructions and exact callback URL. Credentials may be saved encrypted or defined in wp-config.php<\/code> as WP_GLOBAL_SITE_TAG_GOOGLE_CLIENT_ID<\/code> and WP_GLOBAL_SITE_TAG_GOOGLE_CLIENT_SECRET<\/code>. Constants take precedence.<\/p>\n\nAfter Google returns to WordPress, choose an Analytics property and its website data stream. The plugin recommends hostname and exact existing-Measurement-ID matches, but an administrator confirms every selection.<\/p>\n\n
Identifier guide<\/h4>\n\n\n- Property ID<\/strong> is the numeric GA4 reporting property used by the Data API.<\/li>\n
- Data Stream ID<\/strong> is the numeric identifier of one stream inside a property.<\/li>\n
- Measurement ID<\/strong> begins with
G-<\/code> and identifies the website tag for that stream.<\/li>\n- Google Tag Manager container ID<\/strong> begins with
GTM-<\/code> and is a separate tracking integration.<\/li>\n- A legacy Universal Analytics tracking ID<\/strong> begins with
UA-<\/code>. Version 2 preserves it as the frontend tag but does not use it as the GA4 reporting Measurement ID.<\/li>\n<\/ul>\n\nThese values are stored separately. Choosing a reporting stream does not overwrite the generic tracking ID unless the administrator explicitly chooses replacement after a mismatch warning.<\/p>\n\n
Installation modes<\/h4>\n\n\n- Install with WP Global Site Tag<\/strong> lets this plugin output the saved tag.<\/li>\n
- Tracking is installed elsewhere<\/strong> keeps reporting available but prevents duplicate tag output.<\/li>\n
- Do not install a tag<\/strong> disables tag output while preserving the reporting connection.<\/li>\n<\/ul>\n\n
Existing users<\/h4>\n\n
Version 2 preserves the existing option name, manual tag ID, additional destinations, Consent Mode setting, trusted custom commands, hooks, and frontend behavior. This includes legacy UA-<\/code> identifiers that Google may route to a connected GA4 destination. Existing sites default to plugin-managed installation so an update does not stop measurement. Analytics reporting remains disconnected until an administrator completes the new read-only connection.<\/p>\n\nConsent and privacy<\/h4>\n\n
Consent Mode is not a consent banner. You still need a consent management platform or your own consent interface to collect a visitor's choice and update Google's consent state.<\/p>\n\n
When Consent Mode defaults are enabled, this plugin still loads gtag.js. Google may receive consent-state and cookieless requests before consent is granted. If your requirements prohibit loading Google before consent, use the wp_global_site_tag_should_render<\/code> filter to prevent output until your consent system allows it.<\/p>\n\nWhen using a GTM container, configure consent initialization and defaults inside Google Tag Manager. The plugin's Consent Mode setting applies only to gtag.js output.<\/p>\n\n
With the recommended connection, Digital Apps stores the Google refresh token and WordPress stores an opaque connection token and short-lived access tokens. With the advanced self-managed connection, OAuth credentials and Google refresh and access tokens stay on WordPress. Locally stored connection data is encrypted with keys derived from WordPress salts and saved in non-autoloaded options. Administrators can disconnect at any time, which requests revocation and removes local connection data and report caches. The saved frontend tag remains unchanged.<\/p>\n\n
External services<\/h4>\n\n
When tracking is enabled, visitors' browsers request Google tag resources from https:\/\/www.googletagmanager.com<\/code>. These requests disclose standard web request information such as the visitor's IP address, browser details, and referring page to Google. Configured Google products may send additional measurement or advertising events.<\/p>\n\nThe recommended connection sends the site URL, hostname, plugin and protocol versions, callback URL, a short-lived state and code challenge, and later an opaque connection token to https:\/\/connect.digitalapps.com\/v1\/<\/code>. Digital Apps uses this information only to complete Google authorization, retain the refresh token, renew short-lived access, and revoke the connection. It does not receive Analytics property, stream, or report requests or responses.<\/p>\n\nWhen an administrator views reports, the plugin communicates directly with these Google services:<\/p>\n\n
\n- Google authorization at
accounts.google.com<\/code>.<\/li>\n- Google Analytics Admin API at
analyticsadmin.googleapis.com<\/code>.<\/li>\n- Google Analytics Data API at
analyticsdata.googleapis.com<\/code>.<\/li>\n<\/ul>\n\nThe advanced self-managed route additionally communicates directly with Google token and revocation services at oauth2.googleapis.com<\/code>.<\/p>\n\nThe plugin requests the analytics.readonly<\/code> scope. Google receives the administrator's authorization request and normal request metadata. Reporting requests include the selected property, date range, and allowlisted report fields. The plugin does not add telemetry. Review the Digital Apps Privacy Policy<\/a> and Terms<\/a>.<\/p>\n\nReview Google's Privacy Policy<\/a>, Terms of Service<\/a>, OAuth terms<\/a>, and Google Analytics terms<\/a>.<\/p>\n\n\n\n- Upload the
wp-global-site-tag<\/code> folder to \/wp-content\/plugins\/<\/code>, or install the plugin through WordPress.<\/li>\n- Activate WP Global Site Tag<\/strong>.<\/li>\n
- Open Settings > WP Global Site Tag<\/strong>.<\/li>\n
- For reports, click Connect with Google<\/strong>, choose an account, property, and website data stream.<\/li>\n
- For manual tracking only, open Tracking settings, enter a valid tag or container ID, choose the installation mode, and save.<\/li>\n
- Verify public tag behavior with Google's Tag Assistant and verify your consent workflow.<\/li>\n<\/ol>\n\n\n
\nCan I keep my existing manually configured tag?<\/h3><\/dt>\nYes. Version 2 preserves it. The Analytics setup looks for an exact stream Measurement ID match and asks before making any change. If the saved value is a legacy UA-<\/code> identifier, confirm current collection in GA4 Realtime before replacing or removing it.<\/p><\/dd>\nWhy do reports need a Google connection when tracking already works?<\/h3><\/dt>\nTracking sends data from the public site. Reporting requires separate read-only permission to retrieve data from a GA4 property. A manual tag alone does not grant report access.<\/p><\/dd>\n
Do I need to create a Google Cloud OAuth application?<\/h3><\/dt>\nNo for the recommended connection. Digital Apps owns the OAuth application and required API configuration. Create your own application only when using the advanced self-managed route.<\/p><\/dd>\n
How do I fix redirect_uri_mismatch with my own OAuth application?<\/h3><\/dt>\nOpen the advanced connection section, copy its callback URL, and add that exact value to your OAuth client's authorized redirect URIs. Check scheme, host, path, and trailing slash exactly.<\/p><\/dd>\n
What happens when Google access is revoked?<\/h3><\/dt>\nThe dashboard asks an administrator to reconnect. Tracking remains in its selected installation mode and the saved tag is not removed.<\/p><\/dd>\n
Why is a property or stream missing?<\/h3><\/dt>\nConfirm the connected Google account can access the GA4 property, both required APIs are enabled, and the property has a Web data stream. Mobile-app streams are not offered as website choices.<\/p><\/dd>\n
Why is cached data shown?<\/h3><\/dt>\nDuring a temporary Google outage or rate limit, the dashboard may show its most recent cached report with a clear stale-data notice. Use Refresh after Google is available again.<\/p><\/dd>\n
Can Free show more than 7 days?<\/h3><\/dt>\nNo. Free provides an inclusive 7-day report. The separately installed Pro add-on adds 30-day, longer, and custom ranges.<\/p><\/dd>\n
Does enabling Consent Mode block Google until consent?<\/h3><\/dt>\nNo. It queues denied defaults before Google tag configuration, but gtag.js is still requested. Connect a consent management platform that calls gtag('consent', 'update', ...)<\/code>, or prevent rendering with the provided filter until loading is allowed.<\/p><\/dd>\nHow do I prevent tag output for selected requests?<\/h3><\/dt>\nChoose an external or disabled installation mode, or return false<\/code> from the wp_global_site_tag_should_render<\/code> filter. The filter receives the current decision, normalized identifier, and normalized plugin options.<\/p><\/dd>\nWhat does uninstall remove?<\/h3><\/dt>\nUninstall removes plugin settings, encrypted Google credentials and tokens, OAuth state, and registered report caches, including across multisite. Define WP_GLOBAL_SITE_TAG_PRESERVE_DATA<\/code> as true<\/code> before uninstalling to retain data.<\/p><\/dd>\n\n<\/dl>\n\n\n2.0.0<\/h4>\n\n\n- Added a persistent Connect with Google flow, advanced self-managed OAuth, property selection, and website data-stream setup.<\/li>\n
- Added Free overview, trend, and top-content reports for an inclusive 7-day range.<\/li>\n
- Added encrypted local connection storage, optional self-managed credentials, safe token refresh and revocation, fixed-host Google API adapters, caching, stale fallback, and refresh controls.<\/li>\n
- Added explicit plugin-managed, externally managed, and disabled installation modes without changing existing tracking on upgrade.<\/li>\n
- Preserved legacy
UA-<\/code> tracking IDs during upgrades and added guidance for connected GA4 destinations.<\/li>\n- Added centralized entitlements and extension points for the separate Pro add-on.<\/li>\n
- Added responsive, keyboard-accessible setup and dashboard interfaces with live status announcements.<\/li>\n
- Expanded privacy, external-service, troubleshooting, uninstall, developer, test, and release documentation.<\/li>\n<\/ul>\n\n
1.1.0<\/h4>\n\n\n- Added correct, separate rendering for Google tags and GTM containers.<\/li>\n
- Added structured multiple destinations and Consent Mode v2 defaults.<\/li>\n
- Restricted custom JavaScript editing to trusted users and blocked script-tag breakout content.<\/li>\n
- Fixed missing-option warnings, incomplete saves, duplicate configuration, escaping, accessibility, and translation issues.<\/li>\n
- Added complete uninstall cleanup, including multisite support and an opt-out constant.<\/li>\n
- Replaced legacy Docker, Gulp, and Webpack tooling with wp-env and smoke tests.<\/li>\n<\/ul>\n\n
1.0.7<\/h4>\n\n\n- Removed warning messages.<\/li>\n<\/ul>\n\n
1.0.6<\/h4>\n\n\n- Added MIME type metadata.<\/li>\n<\/ul>\n\n
1.0.5<\/h4>\n\n\n- Updated the settings label.<\/li>\n<\/ul>\n\n
1.0.3<\/h4>\n\n\n- Added a settings link on the Plugins screen.<\/li>\n
- Moved the settings page under Settings.<\/li>\n<\/ul>\n\n
1.0.2<\/h4>\n\n\n- Updated compatibility metadata for WordPress 5.0.<\/li>\n<\/ul>\n\n
1.0.0<\/h4>\n\n\n- Initial release.<\/li>\n<\/ul>","raw_excerpt":"Install a Google tag and view useful Google Analytics 4 reports inside WordPress with a guided, read-only connection.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/79023","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=79023"}],"author":[{"embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/digitalapps"}],"wp:attachment":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=79023"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=79023"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=79023"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=79023"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=79023"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=79023"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}