TagEasy tracking profile

67out of 100

supabase.com

Needs attention

Mostly there (running 1 session-replay tool), but missing Consent Mode v2 drops the score.

GA4GTMHotjar
Latest audit Aug 18, 2026Visit site
audited byTagEasy
See the latest report

Needs attention

Vendors detected (3)

Across the homepage HTML and the GTM container (if one is loaded). Grouped by category.

Analytics
GA4GTM
Session replay
Hotjar

What we see

Supabase's tracking setup is too early to trend with just one audit, but the 67 score reveals a critical gap: Consent Mode v2 isn't implemented despite being mandatory for EU traffic since March 2024. The stack itself is lean and sensible—GA4 and GTM for analytics paired with Hotjar session replay—but the lack of consent signals means compliance risk is real for any European visitors. Implementing Consent Mode v2 in GTM is the immediate priority to close this exposure.

Score history

2 audits · 1 not scored

WhenScoreVendorsReport
Aug 18, 2026, 03:32 AM UTC67GA4, GTM, HotjarOpen
Jul 13, 2026, 03:30 AM UTCnot scoredCompareOpen

What the latest audit found

  • Consent Mode v2

    No Consent Mode v2 signals detected. Required for EU traffic since March 2024.

  • Meta Pixel

    No Meta Pixel detected — fine if you don’t advertise on Meta.

  • TikTok Pixel

    No TikTok Pixel — fine if TikTok ads aren’t part of your stack.

  • Google Ads conversion

    No Google Ads conversion tag detected — fine if you don’t run Google Ads.

  • Consent banner

    No consent-management platform detected. If you serve EU/UK traffic, you almost certainly need one.

  • DataLayer initialised

    No `window.dataLayer` initialisation detected in the initial HTML. Most templating libraries don't do this for you.

  • Tracking on deep pages

    No GA4 or GTM on the homepage, so there was nothing to compare /docs/guides/getting-started/quickstart… against.

  • GA4 measurement ID

    Found G-XW18KGKGNR.

  • GTM container

    Container GTM-WCVRLMN7 is loading.

  • PII in URL

    No emails or phone numbers detected in the URL.

  • Tracking script weight

    0 B across identified analytics + tag-manager scripts.

  • GTM debug mode

    No GTM debug/preview parameters exposed.

  • HTTPS

    Page served over HTTPS — tracking pixels can set secure cookies and Consent Mode v2 works correctly.

  • Single GA4 property

    Exactly one GA4 property loading.

Own supabase.com?

Sign in to claim this profile and add a verified badge.

Email me the full report

We'll send this report to your inbox now, then re-audit supabase.com on the cadence you pick and email you if the score falls 15 points or more. No account, no password.

Then re-check it:

Unsubscribe anytime. We won't share your address.

Embed this score

Drop the badge on your site, status page, or pitch deck. It links to this profile.

TagEasy tracking quality for supabase.com

HTML

<a href="https://www.tageasy.io/sites/supabase.com" target="_blank" rel="noopener">
  <img src="https://www.tageasy.io/api/public-badge/supabase.com.svg" alt="TagEasy tracking quality for supabase.com" width="240" height="44" />
</a>

Building a dashboard? The latest audit is also available as JSON at /api/public-audit/by-domain/supabase.com. Free + CORS-open, 60 requests / hour per IP.

Run a fresh audit on supabase.com

Audit data on this profile is cached for 24h. Want the most current snapshot? Run a new audit — the result lands here automatically.

Want this monitored continuously instead of by sporadic public audits?

The demo is a real workspace with sample data — no signup, no card.