One check across GA4, Tag Manager and Google Ads.
Every key event, who sends it and where it is counted, in one map.
Connect read-only and the audit follows each event from Tag Manager into GA4 and Google Ads, finds what is counted twice, and checks revenue against your real orders. Or just check the website, with no sign-in.
What only this audit shows
Free tools check GA4, Tag Manager or Google Ads one at a time. These twelve cross-checks need all three side by side, plus the site itself.
Every key event, who sends it and where it is counted: Tag Manager, the site, GA4, Google Ads and Meta in one row.
X-03High impact
Primary conversions nothing sends
Every primary Google Ads conversion is sent by a tag or imported from GA4.
X-04High impact
What Google Ads optimises for
Google Ads optimises for the business's real conversion.
X-06High impact
Measurement IDs outside this property
The site and Tag Manager send only to this property's measurement ID.
X-11High impact
Shopify app and Tag Manager both send
Only one of Shopify's Google app and Tag Manager sends GA4 events.
The same purchase or lead counted twice, found across tools that each look fine on their own.
X-01High impact
Purchases or leads counted twice in Google Ads
Each purchase or lead counts once in Google Ads.
X-02High impact
Conversion tags that send into nothing
Every Google Ads conversion tag sends to an active conversion action.
X-05Medium impact
One primary purchase in Google Ads
Google Ads has one primary purchase conversion, native or imported.
X-12High impact
Meta Pixel and Conversions API
Meta's Pixel and Conversions API share event IDs for purchases.
GA4 against Google Ads against your orders, in money, from your own numbers, and what breaks the chain between them.
X-07High impact
Revenue truth
GA4, Google Ads and the store agree on revenue within the usual bands.
X-08High impact
Google Ads to GA4
GA4 and Google Ads are linked, auto-tagging is on and clicks arrive.
X-09Medium impact
Enhanced conversions set up
Customer data is allowed in Google Ads and sent by the conversion tags.
X-10High impact
Consent across the chain
Google tags wait for consent and send ad_user_data and ad_personalization.
The same report also runs every GA4 Auditor and GTM Auditor check on what you connect, and the eleven website checks below.
Three steps, a few minutes
Your details
An email for the report and the website, so the audit knows which GA4 stream, container and Google Ads account the site uses.
Connect, read-only
Tick GA4, Tag Manager and Google Ads, sign in with Google and confirm the matches. An orders export is optional.
Your report
The Event map first, then what is counted twice and revenue truth, a grade, the top 3 findings with the evidence, and what to do next.
What you get, free
The whole report. Nothing held back for later.
The Event map.
Every key event in one row: what sends it, whether the site visit saw it, GA4's count, how Google Ads counts it, Meta's Pixel and Conversions API, and its status.
Double counting and revenue truth.
Everything counted twice across tools, and GA4 against Google Ads against your orders, in money.
PDF, Excel and CSV.
The whole report as a PDF, the Event map and every finding in an Excel workbook and as CSV, with the same check codes, and a summary by email.
How the grade works
Four areas, each weighed: the cross-checks 35, GA4 25, Tag Manager 25 and the website 15. An area you did not connect shares its weight out among the others. Within an area, high-impact checks count three times, medium twice, low once.
A pass earns all of its weight, a finding that needs a look half, a broken one none. Checks that could not run never count. Grades run A (90+), B (80+), C (65+), D (50+) and F.
Things it refuses to do
- Change any setting. Read-only access to each account: nothing is created, changed or published.
- Store your tag code. Tag names, IDs and event names only.
- Read personal data. Only counts: personal data in a request or an address is reported by field name, never its value.
- Place orders or submit forms. The site visit opens pages like a visitor and never buys or submits.
- Share your data. It is used for this report only, and never sold or shared.
Is it safe to connect?
Yes. Google's own screen asks only for read access to the accounts you tick.
- What we read: GA4's settings and 30 days of totals, the live version of the containers you pick, and Google Ads' conversion actions and clicks.
- How long the access lasts: it is used once, then deleted, and Swishiy asks Google to end it, unless a Swishiy workspace uses the same Google account.
- Your orders export: read in your browser; only totals per day are sent.
- How long the report stays: 90 days, then it is deleted. It can be deleted sooner from the report.
The full details live in our privacy policy.
Why is it free?
The audit is how most people meet us. Many fix things on their own. Some book a call to go through the report, and some come back for the hands-on work, in Swishiy or with us. Your report is complete either way.
Who it's for
- Shops and lead-gen businesses spending on Google Ads who want to know the conversions it bids on are real.
- Agencies and freelancers taking over an account and wanting the whole chain in one picture.
Just the website: the quick scan
Eleven checks on your public website, with no sign-in. They run in the full audit too.
S-01High impact
Tracking on every page
The same container and measurement ID load on every page the scan reached.
S-02High impact
Duplicate loads
No container, Google tag or event was loaded twice.
S-03High impact
Consent behaviour
Tags follow the visitor's consent choice.
S-04Low impact
First-party server
GA4 data goes through the site's own server.
S-05Medium impact
Pixel sandbox addresses
GA4 events report the real page, not the pixel sandbox.
S-06High impact
Shopping events and their fields
Shopping events arrive with value, currency and items.
S-07High impact
Personal data in tracking
No email address or phone number was sent to a tag.
S-08Medium impact
Pixels outside Tag Manager
No ad pixel is pasted into the theme.
S-09Low impact
Retired tags
No retired tag (Universal Analytics) loads.
S-10Low impact
Tools that do the same job
No two tools do the same job.
S-11Low impact
Third-party script weight
Third-party scripts stay light.
- Read-only: the scan never submits a form and never places an order.
- Personal data is reported by field name only, never its value.
- The report and its link are kept for 90 days and can be deleted sooner.
Who built it
Swishiy is an independent marketing measurement company. The audit was built by Qudees Kiani on rules taken from real tracking audits across GA4, Tag Manager and Google Ads, so it looks for the problems that show up in practice.
Verified client reviews
What clients say
34 written reviews. 4.9 average across 47 ratings. Top Rated Plus on Upwork with 100% job success. Every quote below is from a real, completed Swishiy engagement.
- 4.9★ average
- 34 reviews
- 100% job success
“It was a pleasure to work with Qudees. He really knows what he is doing and made a huge impact on our Google Ads account. After Qudees fixed our tracking our sales began to stabilize. His price was more expensive than other freelancers selling the same service but his expertise was 100% worth the extra cost due to the immediate increased performance of our ads.”
“Complete expert, very knowledgeable in attribution/tracking, as well as data science and most importantly business outcomes. Qudees is a rare blend of all three, and is certainly a top freelancer in the space. If you're looking for a standup guy who's an expert and prides himself in high quality work, look no further.”
“Qudees was excellent to work with from the beginning of the project through to completion. He built a comprehensive, user-friendly Looker Studio dashboard pulling Google Analytics, Meta, Google Ads and website behaviour — ultimately allowing the client to quantify the best use of their ad spend and resources. Would definitely recommend.”
“We worked with Qudees on a task where another tracking expert had failed. The situation was really bad, but Qudees quickly took control and fixed the issues. He made it possible for us to track everything from one place. I highly recommend working with him.”
“This is the second time that I've worked with Qudees on a pixel audit. He worked quickly, was very thorough, explained what was happening throughout, and I'll definitely be working with him again.”
“Hire this guy. I'm so glad I did. Problem solved the task and came back with a solution that was better. An expert in what he does and always hit his deadlines.”
“Qudees was perfect for this job. He was communicative, responsive, and completed everything in a timely and complete manner. I would recommend him highly for anything having to do with setting up Google Analytics, migrating your analytics account, creating conversion trackers and other metrics.”
“Qudees is a very knowledgeable consultant in digital marketing, especially for eComm businesses. He explained everything in really good detail and was very patient with my questions. Highly recommended!”
“Super detailed! Well prepared, great questions and solutions — as well as examples of how he had created solutions for others in the past. A+ experience!”
“Qudees is well versed in analytics software. He is still my go-to for anything GA4 & analytics.”
“Qudees has helped my business boom with his knowledge of Google Ads. I will definitely be hiring him again!”
“Great working with Qudees! We will absolutely plan to use him for future projects.”
Common questions
What does the Tracking audit check?
Everything the GA4 Auditor, the GTM Auditor and the website quick scan check, plus twelve cross-checks that only show with the accounts side by side: a purchase or lead counted twice in Google Ads, conversion tags that send into nothing, primary conversions nothing sends, Google Ads optimising for a step instead of the sale, measurement IDs outside your property, revenue in GA4 against Google Ads and your orders, the GA4 and Google Ads link, enhanced conversions, consent across the chain, Shopify's app and Tag Manager both sending, and Meta's Pixel and Conversions API.
What is the Event map?
One row per business event (purchase, add to cart, begin checkout, lead, page view and your top custom events), showing what sends it, whether the site visit saw it, how often GA4 counted it and whether it is a key event, how Google Ads counts it, and whether Meta's Pixel and Conversions API both send it. Each row says OK, Counted twice, Not used, Broken or Not seen, with the evidence one click away.
Can it change anything in my accounts?
No. Google's screen asks for read-only access to the accounts you tick: analytics.readonly, tagmanager.readonly and the Google Ads read access. Nothing is created, changed or published. The access is used once, then deleted, and Swishiy asks Google to end it unless a Swishiy workspace or a Google Ads Auditor session uses the same Google account.
What does the quick scan check?
Eleven checks on your public website: whether every page loads the same tracking, duplicate tags, what happens after someone rejects cookies, first-party tracking, Shopify's pixel sandbox, shopping events and their fields, personal data in tracking requests, pixels pasted outside Tag Manager, retired tags, tools that do the same job, and how much third-party script the site loads.
Do I need to sign in or give an email?
No sign-in and no email to start. The grade and the top 3 findings show straight away. The full report, its PDF and Excel file open with an email, and the report is emailed to that address with its link.
Does the scan change anything on my site?
No. It reads the home page's code and opens a few pages in a browser, like a visitor would. It never submits a form, never adds to cart through checkout and never places an order.
What does it store?
Tag IDs, event names, which fields an event carried and how many requests were seen. Never the values inside a request, and never personal data: where a request carried an email address or a phone number, the report names the field, not what was in it. The report and its link are kept for 90 days and can be deleted sooner from the report.
Why can some checks say “Couldn't check”?
Some sites refuse automated visits, and some checks need the live visit. When a check cannot run, the report says why and the grade leaves it out, so a check that did not run never counts against the site or in its favour.
How is the grade worked out?
Each check weighs by its impact: high counts three times, medium twice, low once. A pass earns all of its weight, a finding that needs a look half, a broken one none. A is 90 and above, B 80, C 65, D 50, and F below that.
What can it not see?
The thank-you page and checkout events (the scan never orders), lead events on form submits, pages behind a login, what happens to data after it leaves the browser, and the settings inside GA4, Tag Manager and Google Ads. The report lists these too.
See every event, who sends it and where it is counted.
A few minutes, read-only, nothing changes.