First CHAppsWeb apps

First CH Apps / Third-Party Tag Inventory

Third-Party Tag Inventory

Enter your site's URL to list the analytics, advertising and social-embed tags written in its HTML, grouped by company.

How it works and details

Enter your own site's URL and we list the analytics, advertising and social-embed tags written in that page's HTML, grouped by company. Tags for services that have been shut down (Universal Analytics and others) are flagged as clean-up candidates, and external hosts that are not in our table are shown separately. Use it when you inherit a site, review your privacy notice, or need a sheet for asking your web agency what each tag is for.

Start with the top page. Some tags live only on the contact form or the order-complete page, so checking your main pages one by one catches more.

See a sample result (fictional site)

https://www.example.jp/

2 companies behind the services found

1 tags for discontinued services (clean-up candidates)

Only tags written in the HTML. Actual data transmission is not verified. Tags loaded through a tag manager are not visible. Not finding a tag does not mean nothing is sent.

Services6
Hosts not in our table1
HTTP status200
Elements readscript 4 · img 0 · iframe 2 · inline 3
Download the inventory (CSV)

Columns: service, company, type, typical purpose (with source), discontinued, where it was found, where to stop it, plus three empty columns — Still in use?, Who added it?, Keep / remove. Those cannot be read from the HTML, so fill them in with your web agency.

Clean-up candidates — tags for discontinued services are still on the page

The provider no longer accepts data from these. They measure nothing, so ask your web agency whether they can be removed.

  • Universal Analytics (UA)Ended 2023-07-01

A tag manager is installed. Tags that run inside it are not written in the HTML, so they do not appear in this list. Check them in the tag manager itself.

By company

Google5 services

  • Universal Analytics (UA)AnalyticsDiscontinued · clean up

    Google's previous web analytics. The tag sends page views to Google to be counted (succeeded by Google Analytics 4)
    Ended 2023-07-01 — Standard UA properties stopped processing data on 1 July 2023, and from the week of 1 July 2024 their past data is no longer accessible

    Found in the HTML
    script src / inline script
    Matched
    www.google-analytics.com/analytics.jsUA-0000000-1
    Where to stop it
    Remove the tag with an ID starting UA- from the site's HTML (theme header, CMS plugin or settings field); if it was added through a tag manager, that container
    Source for purpose
    support.google.com/analytics/answer/11583528（checked 2026-10-29）
  • Google Analytics 4 (GA4)Analytics

    Web analytics. The tag sends visits and interactions to Google so they can be reported in Analytics

    Found in the HTML
    script src
    Matched
    www.googletagmanager.com/gtag/js?id=G-SAMPLE0001
    Where to stop it
    Remove the tag with an ID starting G- from the site's HTML (theme header, CMS plugin or settings field); also check Admin > Data streams in Analytics; if it was added through a tag manager, that container
    Source for purpose
    support.google.com/analytics/answer/9304153（checked 2026-10-29）
  • Google Tag Manager (GTM)Tag manager

    A container for loading other tags. The tags inside it are not written in the HTML, so this page cannot see them

    Found in the HTML
    inline script
    Matched
    googletagmanager.com/gtm.jsGTM-SAMPLE1
    Where to stop it
    Review the tags inside in Tag Manager (the container's Tags list). To remove the container itself, delete the GTM- snippet from the site's HTML
    Source for purpose
    support.google.com/tagmanager/answer/6103696（checked 2026-10-29）
  • YouTube embedSocial, video & map embed

    An embedded player that plays YouTube videos inside the page

    Found in the HTML
    iframe
    Matched
    www.youtube-nocookie.com/embed/sample
    Where to stop it
    The body of the page holding the video (the embed block in the CMS editor)
    Source for purpose
    developers.google.com/youtube/player_parameters（checked 2026-10-29）
  • Google Maps embedSocial, video & map embed

    An embed that shows a Google Map inside the page

    Found in the HTML
    iframe
    Matched
    www.google.com/maps/embed?pb=sample
    Where to stop it
    The body of the page holding the map (often the company or access page)
    Source for purpose
    developers.google.com/maps/documentation/embed/get-started（checked 2026-10-29）

Meta1 service

  • Meta PixelAdvertising

    Sends site actions such as views and purchases to Meta so Facebook and Instagram ads can be measured and targeted

    Found in the HTML
    script src / inline script
    Matched
    connect.facebook.net/en_US/fbevents.jsfbq('init'
    Where to stop it
    Remove the fbq('init') code from the site's HTML (theme header, CMS plugin or settings field); also check the pixel in Meta Events Manager; if it was added through a tag manager, that container
    Source for purpose
    developers.facebook.com/docs/meta-pixel/get-started（checked 2026-10-29）

External hosts not in our table (not counted as companies) — 1

External hosts we have no entry for. They include CDNs, web fonts, chat or booking widgets, and your own other domains. Ask your web agency what each one is for.

  • chat-widget.example.netscript src · 1×

What to do next

  1. Hand the CSV to your web agency or predecessor and have them fill in the three empty columns
  2. Remove tags for discontinued services once you have confirmed they are not needed
  3. Review your privacy notice. Our article on Japan's external transmission rules (in Japanese) walks through it: Japan's external transmission rules for websites — what to disclose (Japanese)

How to read this

We only count tags written in the HTML. We do not check whether data is actually sent (we do not open the page in a browser and watch the traffic).

Tags inside a tag manager (GTM and others) are invisible. If GTM is found, review its contents in GTM. Tags injected after JavaScript runs are invisible too.

Not finding a tag does not mean nothing is sent. We read only the one page you entered. Some tags sit only on form or order-complete pages.

We do not judge compliance with any law (including Japan's external transmission rules) and we do not write your privacy notice. This list is raw material for reviewing it and for asking your web agency.

Companies are counted only for services in our table (Google Analytics and a YouTube embed count as one company). Hosts not in the table are kept out of that number and listed separately.

"Typical purpose" is the general description from the provider's documentation. What your site actually uses it for is a question for whoever added it.

Our table (services we match against)

18 services whose role and installation we confirmed in the provider's official documentation (checked 2026-10-29). Anything else appears under "hosts not in our table".

ServiceCompanyTypeStatusSource
Universal Analytics (UA)GoogleAnalyticsEnded 2023-07-01support.google.com
Google OptimizeGoogleAnalyticsEnded 2023-09-30support.google.com
Google Analytics 4 (GA4)GoogleAnalyticsActivesupport.google.com
Google Ads (conversion tracking & remarketing)GoogleAdvertisingActivesupport.google.com
Google tag (gtag.js, GT- ID)GoogleTag managerActivesupport.google.com
Google Tag Manager (GTM)GoogleTag managerActivesupport.google.com
Google AdSenseGoogleAdvertisingActivesupport.google.com
YouTube embedGoogleSocial, video & map embedActivedevelopers.google.com
Google Maps embedGoogleSocial, video & map embedActivedevelopers.google.com
Meta PixelMetaAdvertisingActivedevelopers.facebook.com
Facebook embed (Page Plugin & SDK)MetaSocial, video & map embedActivedevelopers.facebook.com
Instagram post embedMetaSocial, video & map embedActivedevelopers.facebook.com
Microsoft ClarityMicrosoftAnalyticsActivelearn.microsoft.com
Microsoft Advertising UET tagMicrosoftAdvertisingActivelearn.microsoft.com
LinkedIn Insight TagLinkedInAdvertisingActivewww.linkedin.com
LINE Tag (LINE Ads)LY CorporationAdvertisingActivewww.lycbiz.com
X Pixel (formerly Twitter conversion tracking)XAdvertisingActivebusiness.x.com
X post & timeline embedXSocial, video & map embedActivedocs.x.com

How it is matched

Four places are read: script src, img src, iframe src (including lazy-load data-src) and the body of scripts without a src (installation snippets).

External means a different registered domain. www.example.co.jp and cdn.example.co.jp are the same site and are not counted.

Google's tag (gtag.js) is split by the ID prefix: G- is Analytics 4, AW- is Google Ads, UA- is Universal Analytics and GT- is the Google tag.

A service name in the page text is never counted, and non-executing scripts such as JSON-LD are skipped.

Only the first 512KB of HTML is read.

SERVER PROCESSING — what we send and what we keep

Sent: only the URL you enter. Our server (Cloudflare Workers) makes two DNS lookups (A and AAAA) to check the destination is safe, then fetches the page once with a public GET. Redirects get the same check at every hop (up to 5). We never request any tag or host found inside the page.

Stored: nothing. The URL, the HTML and the result are never written to a database (no KV, no D1) and leave memory when the request ends. The CSV is generated on the spot and returned.

Returned: service names, where each was found, the matched text (up to 90 characters each) and the names of hosts not in our table. The fetched page itself is never returned, so this page cannot be used to browse other sites.

Cookies: none are sent, and cookies in the response are not read.

Note: URLs pointing at internal networks, localhost or private IPs are rejected.

Use it as an API

POST /gaibu-soushinsaki/api/inventory with JSON ({"url": "https://example.com/"}) or a form body to get the same result and the CSV back as JSON.