Integration · destination
Google Analytics 4
gtag.js plus Measurement Protocol (EU endpoint) with debug validation before sending.
How events reach GA4
Every path ends in the same place: the policy engine checks the consent purpose this destination requires, strips what may not leave, and the worker delivers with the shared event id.
- Browser tag — loaded by the Track snippet after consent; the vendor script never sits in your template and is never loaded without the required purpose.
- Server API — delivered by the worker with retries, health checks, error classification and a redacted payload preview for every attempt.
- Hybrid — browser tag and server request share one event id; the platform deduplicates on transaction_id.
What is sent
Only what you configure in the event mapping, and only after the policy engine has allowed the event for this destination.
- Event name and timestamp, mapped from Track's standard events to the platform's event names.
- The shared event id in the platform's transaction_id field, so browser and server deliveries count once.
- Click ids this platform may receive: gclid, gbraid, wbraid. Other vendors' click ids are never forwarded.
- Order id, value, currency and items for purchase-type events.
- SHA-256-hashed identifiers (e-mail, phone, external id) for matching — only with the required consent and only if captured.
- The consent state the event was collected under, where the platform accepts consent signals.
Never sent
- Raw e-mail addresses, phone numbers or names — identifiers are hashed on ingest.
- Inferred values: unknown stays unknown, nothing is guessed.
- Events collected without the purpose this destination requires.
- Secrets: tokens live in the encrypted vault and never reach the browser, the assistant or a log.
Technical facts
- Deduplication field
transaction_id— transaction_id- Click ids
gclid,gbraid,wbraid- Consent purpose
- Analytics
- Pinned API version
mp-v2- Implementation status
- Implemented · verified against the vendor documentation · verified 2026-09-02
- Vendor documentation
- GA4 API documentation
What you need
Public identifiers can be typed in chat or the wizard; secrets go through the secure credential card or OAuth and are stored encrypted.
Public identifiers
- measurement_id
- Measurement ID
Credentials
- API secret
api_secret— stored in the encrypted vault
Consent
Requires the analytics purpose. Without it nothing is loaded in the browser and nothing is sent from the server. Inferred consent is never exported.
Setup in a few steps
The assistant runs the detailed checks. You see the milestones that need a decision from you.
Enter identifiers
Add the public IDs from the platform. Formats are validated against the vendor's documentation before anything is saved.
Connect credentials
Paste the token into the secure card or connect the account via OAuth. Secrets go straight into the encrypted vault.
Map and test
Standard events are pre-mapped to the platform's event names. A flagged test event runs through the real pipeline and shows the vendor's answer.
Publish
Review the diff, approve, publish a signed configuration version. Roll back with one click if needed.
From Tracking Knowledge
Guides written by the team that builds this connector.
GA4 Measurement Protocol done right: the EU endpoint, client_id, debug validation and what it cannot do
Sending server events to Google Analytics 4 through the Measurement Protocol: the region1 endpoint, why client_id matters, the 25-event limit, timestamp_micros, the debug endpoint and the consent fields.
Tutorial · 3 min read
Consent Mode v2 without the guesswork: purposes, signals and what a server-side router must do
Which consent signals Google expects, how to derive them from consent purposes instead of vendor lists, why 'advanced' mode needs a legal decision, and how the server side has to mirror the browser.
Guide · 4 min read
Deduplication that survives reality: event ids, order ids and what each platform actually keys on
A platform-by-platform table of deduplication keys — Meta, Google Ads, GA4, TikTok, Microsoft, LinkedIn, Pinterest, Snapchat, Reddit, X, CM360 — and the two-key strategy that keeps hybrid tracking honest.
Reference · 4 min read
Questions
Can I run server-only?
Yes. Choose server mode in the wizard; the vendor script is never loaded and matching relies on hashed identifiers and click ids captured by the tracker.
How are duplicates avoided?
The browser tag and the server request carry the same event id, and purchases add the order id. The worker also deduplicates repeated source events before delivery.
What if the vendor API changes?
API versions are pinned centrally with the verification date; sunset warnings appear in the destination health long before an endpoint is retired.
Connect GA4
Set it up with the guided wizard or let the assistant do it in chat.