Google Tag Manager integration

Download findip-shield.tpl and import it via GTM → Templates → Tag Templates → New → ⋮ → Import. Site key, auto-track, privacy mode, and dataLayer push are configured fields. Trigger: All Pages.

Identify the visitor (optional)

Expand the tag's Identify the visitor section and point its fields at the variables your site already exposes for logged-in users, typically the Data Layer Variables you use for GA4's user_id:

The SDK hashes the values in the browser before anything is sent. The raw user ID and email never leave the page. To find the account behind a hash shown in the dashboard, compute the same SHA-256 (with the same salt) in your own system. See Identify users and add context.

<script>
(function () {
  var s = document.createElement('script');
  s.src = 'https://cdn.findip.net/shield/v1.js';
  s.async = true;
  s.onload = function () {
    if (window.FindIP) {
      window.FindIP.init({
        siteKey: 'pub_xxxxxxxxx',
        autoTrack: true,
        privacyMode: 'balanced',
        pushToDataLayer: true
      });
    }
  };
  document.head.appendChild(s);
})();
</script>

With visitor identification

To attach your own user to each session, add an identify option to the init call with your GTM variables. GTM substitutes {{Variable}} references inside Custom HTML before the tag runs, and the SDK hashes the values in the browser, so Shield never receives the raw ID or email. The dashboard's Install page generates the full tag with your site key filled in. See Identify users and add context for what each field becomes.

window.FindIP.init({
  siteKey: 'pub_xxxxxxxxx',
  autoTrack: true,
  privacyMode: 'balanced',
  identify: {
    userId: '{{DLV - userId}}',
    email: '{{DLV - userEmail}}',
    plan: '{{DLV - plan}}'
  }
});

Do not use the data-site-key attribute form inside GTM. GTM re-creates every <script> in a Custom HTML tag and keeps only src, type, charset and id. All data-* attributes are dropped, so the SDK loads but never initializes and no events are sent. The attribute form is only for a script tag placed directly in your page HTML. While testing, add debug: true to the init options to log every event to the console.

dataLayer.push({
  email_domain: 'gmail.com',
  plan: 'enterprise',
  user_id_hash: 'sha256_hash_here',
});

Push these before the Shield tag fires; the first value found for each key wins. Full field list, hashing guidance, and troubleshooting: Identify users and add context.