Get the inspector
Drag the pink button to your bookmarks bar. Then open your store and click it. It runs on the page you're looking at and shows the results in a panel.
The things that quietly break ROAS
- Consent Mode v2: default and update, all four signals, whether the default runs before your tags, gcs and gcd decoded, advanced or basic.
- Google: GTM containers, GA4 IDs and hits, double tagging, leftover Universal Analytics, Google Ads IDs and the conversion linker.
- Pixels: Meta (with event_id for CAPI), TikTok, Pinterest, Snap, LinkedIn, Microsoft UET and Clarity, Klaviyo.
- Ecommerce: view_item, add_to_cart, begin_checkout and purchase with items, value, currency and transaction_id. Shopify theme, web pixels and checkout.
- Privacy: your cookie banner, server-side tagging hints and marketing cookies set while consent is denied.
Install it in 30 seconds
It's a bookmark that runs a small script on the page you're viewing. The whole tool is inside the bookmark, so it works even on stores with strict security settings.
- Show the bookmarks bar: press Ctrl + Shift + B on Windows, or Cmd + Shift + B on a Mac.
- Drag the pink Ecomtoolpack Inspector button up onto the bar.
- Open any page of your store and click the bookmark. Click it again (or press Esc) to close.
- Show the Favourites bar: View > Show Favorites Bar, or Cmd + Shift + B.
- Drag the pink Ecomtoolpack Inspector button onto the Favourites bar.
- Open your store and click it.
- Nothing happens? In Safari > Settings > Security, check JavaScript is turned on.
- Show the bookmarks toolbar: View > Toolbars > Bookmarks Toolbar > Always Show, or Ctrl + Shift + B.
- Drag the pink Ecomtoolpack Inspector button onto the toolbar.
- Open your store and click it.
- Tap Copy code for mobile above.
- Bookmark this page, then edit that bookmark: name it Ecomtoolpack Inspector and paste the code over the address.
- iPhone and iPad: on your store, open Bookmarks and tap it. Android Chrome: on your store, type "Ecomtoolpack" in the address bar and tap the bookmark in the suggestions. Opening it from the bookmarks list does not run it.
- On a small screen the panel opens as a sheet at the bottom. It's easier on a laptop, but fine for a quick check.
How the score works
You start at 100. Each problem takes points off by how badly it skews the numbers your ads bid on. Tips cost nothing.
A Consent Mode default that runs before any tag, with ad_user_data and ad_personalization set. Ad cookies appearing while consent is denied is the one thing marked critical.
GA4 loaded once, one Meta PageView, a transaction_id on every purchase and an event_id so the Conversions API can dedupe.
view_item, add_to_cart, begin_checkout and purchase with items, value and currency. Run it on a product page, the cart and checkout to see each one.
Nothing is sent anywhere
The inspector only reads what's already in the page: the dataLayer, cookies your scripts can see and the list of requests the browser has made. It makes no network requests of its own, stores nothing and has no tracking. The report only leaves the page when you press copy.
Questions
Will it work on my Shopify store?
Yes. It reads the theme, page type, currency and Shopify's Customer Privacy consent, and spots the web pixels sandbox. One limit: apps and custom pixels in Settings > Customer events run in sandboxed frames, so their requests are invisible to any page script. Use Shopify's pixel test tool for those.
Why should I test in a private window?
Cookies from earlier visits stay until they expire, and once you've accepted the banner, consent is granted. A fresh private window with the banner declined shows what a new visitor gets, which is what the law cares about. Then accept and press Rescan to check the update fires.
What's the difference between advanced and basic Consent Mode?
In basic mode Google tags wait until the visitor agrees. In advanced mode they send cookieless pings while consent is denied, which lets Google model the missing conversions. The inspector works out which you have from the hits it sees. Which is right depends on your market and your lawyer.
What are gcs and gcd?
Parameters on every Google hit that say what consent the tag had. gcs=G100 means ads and analytics both denied, G111 both granted. gcd holds all four v2 signals and whether each came from the default or an update. The Consent tab decodes them for you.
It says a tag is missing but I can see it in GTM
The inspector sees only this page in this browser right now. A tag may not have fired yet (it waits for a click or consent), an ad blocker may be stopping it, or it runs in a sandbox. Turn off ad blockers, interact with the page, then press Rescan.
Does it work on stores with a strict Content Security Policy?
Yes. The full tool is inside the bookmark, so nothing is loaded from our servers, and the panel is built without innerHTML. A very small number of browsers block all bookmarklets on such sites; if that happens, try another browser.
What do I do with the report?
Press "Copy report for Claude" and paste it into Claude with the Tracking & Attribution skill from Ecomtoolpack. The copied text includes a ready-made prompt asking for fixes for your platform and market and a testing checklist.
Found problems? Fix them with Claude.
Ecomtoolpack includes the Tracking & Attribution skill, which turns this report into exact fixes for Shopify, GA4, Consent Mode, Meta CAPI and Google Ads, plus Numbers Don't Match, which explains why Shopify, GA4 and your ad platforms still disagree. Plus 10 more store funnel skills. $29.99 once.