Your marketing person asks for “GTM access”. Your ads agency says they need a tag added before the campaign can track conversions. A developer mentions the data layer. You nod, but you are not quite sure what any of it is, or whether you should be handing it over.
Google Tag Manager is not complicated once you see what it is for. This is a plain explanation of how it works, why businesses use it, and the parts you, as the owner, should keep an eye on.
What Google Tag Manager is
Most marketing tools need a small piece of code on your website to work. Google Analytics needs one. Google Ads conversion tracking needs one. The Meta Pixel needs one. Traditionally, each of these was pasted into the site’s theme or header by a developer, and every change meant editing the site again.
Google Tag Manager, usually called GTM, replaces all of that with a single piece of code. You install GTM once. After that, the other tracking codes are added, changed and removed inside the GTM website, and GTM loads them on your site. It is free to use, and it works with WordPress and most other website platforms.
The five terms you will hear
- The container is the box that holds everything for one website. It is the snippet that gets installed on your site, and everything else lives inside it.
- A tag is one piece of tracking code, such as the GA4 tag or the Meta Pixel.
- A trigger is the rule that says when a tag should run: on every page, when someone clicks a WhatsApp button, when a form is submitted, or when a thank-you page loads.
- A variable is a piece of information a tag or trigger can use, such as the page address, the text of a clicked button, or an order value.
- The data layer is a channel your website uses to pass information to GTM in a structured way, for example “an order was placed, worth this amount, with these products”, so tags do not have to scrape it off the page. Ecommerce plugins often fill it for you, and if you hear a developer mention it, they usually mean setting this up so purchase or lead data reaches your reports accurately.
Why businesses use it
The main reason is that the people who need tracking changes are rarely the people who can edit the website.
- Adding tools without touching code. GA4 and Google Ads tags are built into GTM, and many other tools, including the Meta Pixel, can be added from templates or with the code the tool provides. Someone fills in an ID and chooses a trigger.
- Tracking actions, not just page views. Button clicks, form submissions, file downloads and outbound link clicks can all be set up with triggers.
- One place to see what is running. Instead of codes scattered across the theme, a few plugins and a page builder, the list is in one dashboard.
- Agencies can work without full site access. An ads agency can manage its own tags without needing a WordPress administrator account.
Preview mode: test before anything goes live
GTM has a Preview mode. You open it from the GTM dashboard, it loads your website in a separate tab, and a panel shows which tags fired on each page and each click, and which did not. Nothing you are testing is visible to real visitors while you do this.
This matters because tracking errors are usually silent. A conversion tag that never fires does not break the website. It just means your ad reports are wrong, and you may not notice for weeks. Anyone working in your container should use Preview before publishing, every time.
Versions and rolling back
Changes in GTM do nothing until someone clicks Submit and publishes them. Each publish creates a numbered version, and you can add a name and a note to say what changed. Ask whoever does the work to write a proper note: “Added Meta Pixel purchase event” is useful, a blank note is not.
If a new version causes a problem, such as broken tracking, a strange pop-up or a slower site, you can open an earlier version and publish it again. That rollback is quick and does not involve your website at all. It is one of the better reasons to use GTM, as long as people write those notes.
Who should have access
GTM has two levels of access. At the account level, a person is either a user or an administrator, and administrators can add and remove other people. At the container level, permissions run from read-only, to editing, to approving, to publishing.
A sensible setup for a small business looks like this:
- You, the owner, are an account administrator, using a Google account you control, not one belonging to an agency or a former employee.
- Your agency or marketer gets edit access, and publish access only if they genuinely need it.
- People who only need to look get read access.
- You review the user list when someone leaves or an agency contract ends, and remove anyone who no longer needs to be there.
The owner-as-administrator point is the same one that applies to your Google Analytics property. If the only administrator is someone else, getting control back later can be slow and awkward.
The risks
Too many tags slow the site
Each tag is extra JavaScript the visitor’s browser has to download and run. A container that has collected years of tags from several agencies, many of them for tools nobody uses any more, can noticeably slow page loading, especially on phones. GTM makes adding tags so easy that removing them tends to be forgotten. Once a year, go through the list with whoever manages it and pause or delete anything that is no longer needed. If the site already feels slow, our guide to speeding up a WordPress website covers what else to check.
Publish access means the power to run any script
This is the point most owners do not realise. GTM has a “Custom HTML” tag type that can run any JavaScript on every page of your site. Anyone with publish permission can use it. That includes code that changes what visitors see, redirects them, or reads what they type into forms.
So treat publish access in GTM the way you would treat an administrator login for your website. Give it to few people, make sure their Google accounts use two-step verification, and remove it promptly when they no longer need it. If your site starts showing behaviour you cannot explain, such as unexpected redirects or pop-ups, check the GTM container’s recent versions as well as WordPress itself. Our website security best practices guide covers the wider picture.
When you do not need GTM
GTM is a tool for managing several tags. If all you want is Google Analytics on a WordPress site, with page views and the events GA4 measures automatically, GTM adds a layer you do not need.
Google’s own Site Kit plugin can connect GA4 to WordPress directly, and it is the simpler route for a single install. You can move to GTM later if you start running ads on more than one platform or need to track specific actions. Two cautions if you do switch: remove the old direct GA4 installation, or every visit is counted twice, and keep one person responsible for knowing where each tag lives.
If you use campaign links in emails or social posts, tagging them properly with our UTM builder often gives you more useful information than adding more tags.
A short checklist
- You are an administrator on the GTM account, with your own Google account.
- Only people who need it have publish permission.
- Every version has a name and a note.
- Preview is used before each publish.
- Unused tags are removed at least once a year.
- GA4 is installed once, not through both GTM and a plugin.
If you would like someone to set up GA4 tracking properly, or look over an existing container and tidy it, Google Analytics Setup is listed from ₹1,499 onwards on our services page, and we will tell you plainly if a simpler setup would serve you better.
Next in this series: WhatsApp Chatbots for Appointment Bookings: How They Work
