GA4 Audit Tool

No. Each visitor signs into this website and connects their own Google account. Only properties accessible to that account can be selected. The site administrator’s GA4 connection is never shared.

Enable the Google Analytics Admin API and Data API and configure an OAuth web client with analytics.readonly access. No paid connector is required. The administrator must complete any Google app verification required for the intended audience; each visitor grants their own access.

Current property timezone and currency, up to 200 data streams, up to 200 configured key events, event-data retention settings and up to 500 event-name rows for 7–90 past property-timezone days. You can name up to 20 expected key events. Missing or restricted sections remain unavailable.

A short-lived access token is encrypted and tied to your website user and login session for up to one hour. No refresh token or report history is saved. Disconnect removes that local connection; Google grants can be revoked in your Google Account. Server logs and backups may retain operational records.

No. Shared web-stream URLs are review candidates, not proof of duplicate firing. Key-event configuration and returned counts cannot verify that a real purchase or form was measured correctly. Use Tag Assistant or DebugView with a controlled interaction; consent and transaction deduplication require separate testing.

Reports can be limited, sampled, thresholded, delayed or revised. Coverage flags and reported row counts are shown. A missing event is not zero activity or proof of broken tracking. Current key-event configuration does not describe all historical settings.

No. Only read-only configuration and reporting requests are made. No events are sent, no tags or settings are changed, and no background checks are scheduled.