Implementation checklist for larger teams

This checklist names who does each step and what Tapper does on its own. For the clicks, see Start here: set up Tapper in five steps or, on a Lift only workspace, Get started with Lift. For Vantage, see Your Vantage onboarding plan.

Who you need

Only an Owner or Admin can connect an account. See Roles: what owners, admins, managers and viewers can do.

Part 1: workspace and products (Tapper admin)

1. Create the account. Sign-up creates a workspace named Default and starts the free trial.
2. On Choose your products, pick Vantage + Lift + Block or Lift only. Agree this with marketing first: once an ad account is connected, the choice is locked. See Choose your products.
3. On Name your workspace, set Workspace name, Time zone, Industry (required) and, with Block, Protected domains. With Block the industry sets preset click limits, so pick the real one.
4. Invite the team from Settings > Members > Invite a collaborator as Admin, Manager or Viewer. Invitations start on Manager, who runs the workspace day to day but cannot manage members or connect ad accounts. Pick Viewer for people who only read. Invitations do not expire.

Part 2: connect ad accounts (Tapper admin with the login holders)

Connecting is a sign-in, not an access request: Tapper lists every ad account the login reaches and you tick the ones to protect. A manager (MCC) account expands into its client accounts. The sign-in lasts 30 minutes, so have the login holder at the keyboard.

• Meta ad sets stay off until someone switches on their Protection. Give this to marketing: Protect Meta ad sets. TikTok ad groups carry the tag Monitored and need no switching: Protect TikTok ad groups.
• Whoever edits the ads in Meta Ads Manager adds the ad_id parameter; Tapper does not: Add the ad_id parameter to your Meta ads.
• On Google, value rules and audience exclusions are automatic (the Value Rule Exclusion and Audience Exclusion chips on Campaigns). Shadow campaigns are optional (Create shadow campaign in a campaign's menu). The Protection switch appears on Search, Display, Shopping, Demand Gen and Performance Max campaigns. Tapper does not manage other types, such as Video; attach Tapper's audiences to them yourself in Google Ads. See What Tapper creates in your Google Ads account.
• "Some ads skip Tapper's tracking" with Fix tracking on the dashboard means an ad carries its own tracking template. Hand it to whoever manages Google Ads.
• Google Analytics is optional and read-only: Setup > Data sources > Google Analytics > Continue with Google.
• LinkedIn Ads, Snapchat Ads and Apple Ads connect from the same step: LinkedIn, Snapchat, Apple.
• Campaign structure syncs at connect and then every 6 hours.

Part 3: website installation (website or GTM team)

Send the website team these four items from Setup > Website > Monitoring (available once an ad account is connected).

1. Monitoring script: Copy monitoring script and paste it right after the opening <body> tag, or install the Google Tag Manager gallery template Tapper - Monitoring Script with the entity's Public Key on an All Pages trigger. Shopify stores keep the theme's script; the PrestaShop drop-in replaces it. See Install the monitoring script with Google Tag Manager.
2. Content Security Policy: if the site sends a CSP header, allow these sources, or browsers block the script:

script-src   https://monitor.tapper.ai
connect-src  https://protect.tapper.ai https://fingerprint.tapper.ai
img-src      https://protect.tapper.ai
worker-src   blob:

3. Cookie policy and consent: an Owner or Admin picks Region-based, Cookie first (default) or Consent first. To pass the visitor's answer, the site calls window.tapper.consent("GRANTED"); or window.tapper.consent("DENIED");. See Cookie policy, consent snippets and recognizing visitors without cookies.
4. Conversions: the Conversion script on the thank-you page (GTM tag, Shopify customer-events pixel, PrestaShop drop-in or JavaScript), recording order value, currency and order id; or Conversion pages, a list of URLs with no snippet. See Install the conversion script and Conversion pages.

Part 4: detection rules and blocking mode (marketing)

1. Open Setup > Rule sets and the default set. The industry presets are the Ad click limits on Click limits; Suggest limits adds another industry's presets. Switches save on click; click limit edits save with Save at the bottom.
2. Review Detection features and Countries. New rule set defaults: Block JavaScript-disabled browsers, Block suspicious click behavior and Block repeat clicks from one device on; Block VPN traffic, Block by country, Block across ad platforms and Block tracking pixels for invalid traffic off. See Rule sets: every setting, tab by tab.
3. Decide when blocking starts. Monitor-only is on for every new rule set and cannot be switched off during the free trial. See Monitor-only.
4. For different rules per account or campaign, create extra rule sets and link them under Applies to: Rule sets: apply different rules.

Part 5: review (marketing, ad operations, analytics)

• Dashboard (with Block): updates every 4 hours. Watch Total Clicks, Total Blocked (Total Invalid while monitor-only) and Invalid Traffic % on Overview. Two banners need an owner: "Google Ads setup doesn't match your protection rules" (campaigns target countries your rules block) and "Some ads skip Tapper's tracking". On Lift only, the dashboard shows Lift's figures.
• Lift: checks every connected ad account daily once Tapper has set your workspace up. Owners, Admins and Managers use it; decide who presses the fixes and who gets Lift's emails: Lift emails.
• Reports: on plans with reports, the monthly report appears at Reports after each month closes, with View and Download. Viewers can open it.

The checklist

Related

• Start here: set up Tapper in five steps
• Choose your products: Lift only or Vantage + Lift + Block
• Invite members and set their roles
• Connect a mobile app through your tracking tool