GA4
Google Analytics 4 Setup
Install GA4 via GTM Server-Side, enable Enhanced Measurement, configure recommended events, set custom dimensions, link BigQuery, and ship Looker Studio dashboards.
- Install GA4 via GTM Server-Side for privacy compliance and first-party tracking
- Enable Enhanced Measurement for views, scrolls, outbound clicks, search, video, and downloads
- Configure all recommended events including sign_up, login, generate_lead, and purchase
- Set up custom dimensions for content cluster, journey stage, segment, and author
- Configure cross-domain tracking for all owned properties
- Link GA4 to Search Console, Google Ads, and BigQuery for unified analytics
- Enable BigQuery export for unsampled data and SQL-based custom analysis
- Set up Looker Studio dashboards mapped to specific stakeholder roles
Validation: GA4 receives data on all key events with custom dimensions populated and BigQuery export active.
GTM
Google Tag Manager Setup
Install GTM container, add noscript fallback, use Server-Side GTM, organize tags with naming conventions, and document variables, triggers, and tags.
- Install the GTM container in head high after critical CSS
- Add a noscript fallback in body for users with JS disabled
- Use Server-Side GTM for privacy-compliant tracking and reduced page load impact
- Organize tags into folders for Analytics, Marketing, Conversion, SEO, and Custom
- Use workspace versioning with descriptive notes per release
- Implement preview mode testing protocol before any production publish
- Build naming convention with type, vendor, and event or trigger
- Document all custom variables, triggers, and tags in shared workspace
Validation: GTM container is active, sGTM endpoint serves tracking, and all tags fire correctly in preview mode.
GSC
Google Search Console Optimization
Verify all properties, submit sitemaps, monitor Performance and Indexing reports, set alerts, and pull GSC API data into BigQuery for long-range analysis.
- Verify all properties including domain plus URL-prefix variants
- Submit sitemap, image-sitemap, and video-sitemap separately
- Monitor Performance report weekly for queries, pages, countries, and devices
- Track Indexing report and fix every Discovered or Crawled not indexed issue
- Monitor Core Web Vitals report and Page Experience report monthly
- Set up email alerts for manual actions, security issues, and traffic changes
- Build internal /admin/gsc-insights/ dashboard aggregating GSC data
- Use GSC API to pull data into BigQuery beyond the 16-month limit
Validation: All properties verified, sitemaps indexed, GSC alerts active, and custom dashboard pulling fresh data.
DLO
DataLayer Optimization
Build a standardized dataLayer schema with consistent event naming, push server-side where possible, validate via GTM Preview, and avoid PII leaks.
- Build standardized dataLayer schema before adding tracking
- Push events to dataLayer with consistent naming for action, category, and label
- Include user properties for segment, lifetime value, and signup date
- Use ecommerce dataLayer schema for all transaction-related events
- Push events server-side when possible to bypass ad blockers
- Document dataLayer specification in shared docs for engineering
- Validate dataLayer events with GTM Preview mode and Tag Assistant
- Avoid pushing PII directly and hash if needed for matching
Validation: DataLayer spec documented, all key events follow standardized schema, and no PII leaks.
PVO
Privacy & Cookieless Optimization
Implement Consent Mode v2 with proper denied defaults, use Privacy Sandbox APIs, build cookieless tracking via first-party IDs, and honor Global Privacy Control.
- Implement Google Consent Mode v2 with denied and granted states for all storage types
- Use Privacy Sandbox APIs including Topics, Protected Audiences, and Attribution Reporting
- Build cookieless tracking via first-party user IDs and server-side measurement
- Maintain consent log for every interaction with the consent banner
- Provide Do Not Sell My Information and Your Privacy Choices links
- Honor Global Privacy Control signal automatically
- Use IAB TCF v2.2 framework for European traffic where applicable
- Audit data collection practices quarterly per ePrivacy and GDPR
Validation: Consent banner blocks scripts pre-consent, GPC signal honored, and consent audit log maintained.