Implementation checklist for larger teams

When several teams share a Tapper rollout, the work splits four ways: a Tapper admin who owns the workspace, the people who hold the ad platform logins, the website or tag manager team, and the marketers who decide what gets blocked. This checklist names who does each step and what Tapper does on its own. For the click-by-click version of each step, start with Start here: set up Block + Lift in five steps or, on a Lift only workspace, Get started with Lift.

Who you need

Only an Owner or Admin can connect an account. See Roles: what Owners, Admins and Editors can do.

Phase 1: workspace and products (Tapper admin)

Setup is self-serve. The wizard walks through Choose products, Name workspace, Connect ad account, Website monitoring and Detection rules.

1. Create the account. Sign-up creates a workspace named Default and starts the free trial.
2. On Choose your products, pick Block + Lift (Lift's recommendations plus Tapper's tag on your website, detection rules and invalid traffic blocking in your ad accounts, which is Block) or Lift only (Lift's recommendations for your Google Ads, Meta Ads and TikTok Ads campaigns, no tracking code on your website, no audiences or tracking templates in your ad accounts). Settle this with marketing before anyone connects an account: once an ad account is connected the choice is locked.
3. On Name your workspace, set Workspace name, Time zone (every date Tapper shows uses it), Industry (required) and, with Block + Lift, Protected domains. With Block + Lift the industry writes preset invalid click thresholds onto the entity, so pick the real one.
4. Invite the team from Settings > Members > Invite a collaborator, choosing Admin or Editor for each person. Invitations start on Editor, which cannot use Lift, so pick Admin for anyone who works on Lift. Invitations do not expire.

Phase 2: connect ad accounts (Tapper admin with the login holders)

The connect step is a sign-in, not an access request: Tapper lists every ad account the login can reach and you tick the ones to protect. A manager (MCC) account is expanded into its client accounts, and there is nothing to approve inside Google Ads afterwards. The sign-in is good for 30 minutes of account picking, so have the login holder at the keyboard.

Notes for this phase:

• The Meta and TikTok success message says the campaigns are protected, but ad sets and ad groups stay off until someone turns their Protection switch on. Assign that to marketing: Protect Meta ad sets: Protect all or one at a time and Protect TikTok ad groups: Protect all or one at a time.
• Meta ads also need the ad_id URL parameter so each click is tied to the ad that produced it. Tapper does not add it for you; whoever edits the ads in Meta Ads Manager does: Add the ad_id parameter to your Meta ads.
• On Google, value rules and audience exclusions are automatic; the Value Rule Exclusion and Audience Exclusion chips on Manage campaigns show them. Shadow campaigns stay optional (Create shadow campaign in a campaign's menu). The Protection switch appears on Search, Display, Shopping, Demand Gen and Performance Max campaigns. Other types, such as Video, have no switch and Tapper does not manage them; to cover them, attach Tapper's audiences to those campaigns yourself in Google Ads. Details: What Tapper creates in your Google Ads account.
• If a campaign, ad group or ad carries its own tracking template, the dashboard shows "Some ads skip Tapper's tracking" with a Fix tracking button. Hand that to whoever manages the Google Ads account.
• Google Analytics is optional and read-only. Connect it later from the entity's Google Analytics tab with Continue with Google.
• Campaign structure syncs at connect and then every 6 hours.

Phase 3: website installation (website or GTM team)

Everything the website team needs is on the entity's Website monitoring tab, which starts once an ad account is connected. Send them these four items.

1. Monitoring script. Copy it with Copy monitoring script and paste it right after the opening <body> tag, or install the Google Tag Manager gallery template Tapper - Monitoring Script with the entity's Public Key (the key inside the monitoring script on the tab) on an All Pages trigger. Shopify stores keep the theme's monitoring script; the PrestaShop drop-in replaces it. See Install the monitoring script with Google Tag Manager.
2. Content Security Policy. If the site sends a CSP header it must allow these sources, or browsers block the script and Tapper sees no visits:

script-src   https://monitor.tapper.ai
connect-src  https://protect.tapper.ai https://fingerprint.tapper.ai
img-src      https://protect.tapper.ai
worker-src   blob:

3. Cookie policy and consent. An Owner or Admin picks Region-based, Cookie first or Consent first on the tab (Cookie first is the default). If your consent banner should tell Tapper the visitor's answer, the site calls window.tapper.consent("GRANTED"); or window.tapper.consent("DENIED");. See Cookie policy, consent snippets and recognizing visitors without cookies.
4. Conversions. Either the Conversion script on the thank-you page, as a Google Tag Manager tag, a Shopify customer-events pixel, a PrestaShop drop-in or a plain JavaScript snippet, recording the order value, currency and order id; or Conversion pages, where you list the URLs that mean a customer converted and no snippet is needed. See Install the conversion script: GTM, Shopify, PrestaShop or JavaScript and Conversion pages: count conversions without a snippet.

Phase 4: detection rules and blocking mode (marketing)

1. Open the entity's Web detection rules tab. The industry presets are already there as Invalid click threshold rules; Suggest rules adds the presets of the industry you pick to the rows already there. Switches save as soon as you click them; edits to threshold rows are saved with Update threshold rules.
2. Review the Detection features and Blocking switches. Defaults for a new rule set: Block JavaScript-disabled browsers on, Behavior analysis on, Device blocking on, VPN blocking off, Block IPs by country off, Cross-platform blocking off, Pixel Guard off. See Web detection rules: every setting on the tab.
3. Decide when blocking starts. Monitoring-only mode is on for every new rule set, and during the free trial it cannot be switched off. While any entity with a connected account is monitor-only, every page carries the "Monitoring only" notice and the entity list's Mode column reads Monitor only. An entity counts as monitor-only only when every one of its rule sets is. See Monitoring-only mode: why nothing is blocked yet and what changes when blocking starts.
4. If different accounts or campaigns need different rules, create extra rule sets and link them under Applies to: Rule sets: apply different rules to platforms, ad accounts or campaigns.

Phase 5: review (marketing, ad operations, analytics)

• Dashboard (Block + Lift): the data behind the numbers updates every 4 hours. Watch Total Clicks, Total Blocks (shown as Total Invalid while monitoring only) and Invalid Traffic % on Overview. Two banners need an owner: "Google Ads setup doesn't match your protection rules" (campaigns targeting countries your rules block) and "Some ads skip Tapper's tracking". On a Lift only workspace the dashboard shows Lift's figures and recommendations instead.
• Lift: once Tapper has set your workspace up, checks every connected Google Ads, Meta Ads and TikTok Ads account daily (Google Ads by 08:00 UTC) and lists the changes worth making, keywords and ads first. Owners and Admins use it; pick who presses the fixes. Lift's emails are off until each person turns them on for themselves. The prompt Get alerted when account settings drift > Turn on alerts subscribes them to settings alerts and to a weekly digest, sent Monday at 08:00 in the workspace time zone when something is open. See Lift emails: settings alerts and the weekly digest.
• Reports: on plans that include reports, the monthly performance report is published at Reports after each month closes, with View and Download. Nothing to set up. Editor members can open it.

The checklist

Related

• Start here: set up Block + Lift in five steps
• Choose your products: Lift only or Block + Lift
• Invite members and set their roles
• Connect a mobile app through your MMP