Web Analytics for SaaS: A Decision-First Measurement Plan

Web analytics is the collection, processing, and interpretation of website interaction data for a defined decision. A decision-first measurement plan starts with what the team may change, who or what is eligible, and which observable outcome would inform that change. It then specifies events, properties, identity, consent, validation, reporting, and ownership. A tag installation or dashboard alone is not a measurement plan.

Start with the decision, not the tracking plan

“Measure the website” is not a decision. “Decide whether the enterprise comparison page helps qualified accounts begin an evaluation” is. The second statement identifies an object, a population, a possible action, and an outcome that can be translated into evidence.

Google’s event documentation describes events as the way Google Analytics measures interactions. Events and their parameters are useful primitives, but a long event list does not establish why the data is collected or how a result will change work.

There is no universal web-analytics formula or performance benchmark. Even a familiar conversion rate needs an eligible unit, outcome, identity rule, attribution rule, time window, and exclusions. A value without that contract is not comparable across pages, channels, or tools.

Web analytics and product analytics overlap technically. Web analytics often emphasizes acquisition, pages, sessions, and website outcomes. Product analytics often follows people or accounts through feature behavior, activation, and retention. An event-based web tool can answer product questions, and a product platform can ingest website events. The correct boundary is the decision and data contract, not the vendor category.

Build the plan in eight linked steps

Name the decision

Write the specific choice, owner, review date, and actions available if evidence supports, weakens, or cannot resolve the hypothesis.

Define the eligible population

State the people, accounts, sessions, pages, markets, and exposure conditions included. Define exclusions before seeing the result.

Specify the outcome

Choose an observable event or state close enough to the decision to be useful. Do not relabel a convenient click as business value.

Design the event contract

For each event, record the trigger, required properties, allowed values, source, environment, identity state, and owner.

Set identity and session rules

Declare whether the counting unit is a browser, device, user, account, session, or event and how anonymous and known activity may connect.

Apply privacy and consent controls

Minimize data, prohibit unsafe fields, document purpose and retention, and make tag behavior respond to the applicable consent decision.

Validate collection and transformation

Test the trigger, payload, consent states, duplicate behavior, attribution context, and reporting output before trusting a metric.

Assign reporting and response

Publish the metric definition, latency, known limitations, owner, review cadence, and exact operational response to each possible result.

The steps are ordered because later choices depend on earlier ones. If the counting unit changes from sessions to accounts, the denominator changes. If the outcome is redefined, the event contract and historical comparison may break. If consent suppresses collection for part of the population, the report cannot be treated as a complete census.

Events are records; key events are declarations

Google Analytics distinguishes several implementation categories, including automatically collected, enhanced-measurement, recommended, and custom events. The category describes how an event enters that product. It does not say whether the event is useful for the organization’s decision.

Google also lets a property owner mark an event as a key event when it represents an important action. That label is governance, not validation. A generate_lead event can fire when a form submits even if the form is a test, the email is invalid, the visitor is ineligible, or the backend rejects the record.

An event contract should include:

FieldRequired decision
Event nameStable business meaning, not interface copy
TriggerExact observable condition and system of record
Eligible contextPages, environments, audiences, and consent states
PropertiesNames, types, allowed values, null behavior, and sensitivity
IdentityAnonymous and known identifiers permitted at event time
DeduplicationHow retries, refreshes, and repeated actions are handled
VersionWhat happens when meaning or payload changes
OwnerWho approves, tests, monitors, and deprecates the event
Google documents events and parameters as measurement primitives and key events as an owner-configured designation. The documentation does not claim that collecting or marking an event proves its business value.

Identity determines what can be counted

A browser identifier is not a person. A login is not necessarily a unique buyer. An account can contain many users, and one user can use several devices. Sessions are constructed according to tool rules and do not represent every research or buying journey.

Google’s collection overview describes device, activity, and client-identifier inputs used by its system. That makes reported users and sessions analytical constructs produced from available signals. Consent choices, browser behavior, deletion, login state, tag failures, and cross-device use can all change what is observable.

Publish the identity rule beside each metric. “Accounts that reached pricing and later created a qualified opportunity within 30 days” is materially different from “sessions that clicked a demo button.” Neither is inherently correct; they answer different questions with different blind spots.

Privacy is part of measurement design

Google’s data-safeguarding policy prohibits sending information that could identify a person to Google Analytics and places responsibility for collection and use on the customer. That product rule is a minimum implementation boundary, not a complete legal program.

Before creating a property, ask whether it is needed for the decision, whether a less sensitive aggregate would work, who can access it, how long it is retained, and how deletion is handled. Do not place email addresses, full names, phone numbers, or free-text fields into analytics payloads merely because the interface accepts strings.

Google’s consent-mode documentation describes default consent states and updates that influence tag behavior. The exact legal basis and interface depend on jurisdiction and organizational facts. Analytics engineering should implement the approved decision; it should not invent the legal policy.

Validate from the browser to the decision

Testing only whether an event appears in a debugger is insufficient. Run a trace through each layer:

  1. Interface: did the intended action occur, including error and cancellation paths?
  2. Payload: did exactly one correctly named event carry allowed, non-sensitive properties?
  3. Consent: did collection behave correctly before, after, and without a valid choice?
  4. Transport: did blockers, retries, navigation, or network failure duplicate or lose the record?
  5. Processing: did the analytics product transform identity, traffic source, and time as expected?
  6. Report: does a known test population produce the expected numerator and denominator?
  7. Destination: if joined to CRM or warehouse data, did the join preserve eligibility and time order?

Keep automated checks for event schemas and critical flows, plus periodic reconciliation against an appropriate operational system. Differences do not automatically mean analytics is wrong: a CRM lead, backend account, browser event, and billed customer can have legitimate timing and definition differences. The reconciliation must explain them.

Write one compact measurement contract

For each important decision, record these lines:

  • Decision and owner: what can change, who decides, and when.
  • Population and unit: who is eligible and whether counting uses people, accounts, sessions, or events.
  • Exposure: what must be observable before a unit enters the comparison.
  • Outcome: the event or state, source of truth, and allowed delay.
  • Metric: numerator, denominator, window, identity, attribution, and exclusions.
  • Quality: expected test cases, monitoring, known blind spots, and break response.
  • Privacy: purpose, properties, consent behavior, access, retention, and deletion.
  • Decision rule: what result supports a change, blocks it, or requires more evidence.

This artifact keeps instrumentation proportional. If a property does not support the decision, quality check, segmentation, or approved diagnostic, do not collect it “for later.” Extra data carries semantic, privacy, and maintenance cost.

The decision
Approve web analytics when another operator can reproduce the population, outcome, collection path, and decision rule. If the plan starts and ends with events and dashboards, the team has tracking—but not yet trustworthy measurement.

Sources

  1. Google for Developers, “Set up eventsSupports: Google Analytics uses events to measure website and app interactions; Implementations can include automatically collected, enhanced-measurement, recommended, and custom events; Event parameters add context to recorded interactions. Checked 2026-08-24.Limitation: This is product documentation for Google Analytics 4. Its event model and naming guidance are not a universal analytics standard.
  2. Google Analytics Help, “Mark events as key eventsSupports: A Google Analytics event can be marked as a key event when it measures an action important to the business; Key-event designation is configured by the property owner. Checked 2026-08-24.Limitation: Marking an event does not validate its business meaning, implementation quality, attribution, or causal importance.
  3. Google Analytics Help, “How Google Analytics collects dataSupports: Google Analytics processes events and identifiers according to its collection and reporting systems; Website collection can include device, activity, and client-identifier information. Checked 2026-08-24.Limitation: This source describes one vendor's system. Reported users and sessions are modeled constructs, not a perfect census of people.
  4. Google Analytics Help, “Safeguarding your dataSupports: Google's terms prohibit customers from sending personally identifiable information to Google Analytics; Customers remain responsible for their data collection and use. Checked 2026-08-24.Limitation: This is Google product policy, not a complete privacy or legal assessment for any organization or jurisdiction.
  5. Google Analytics Help, “Set up consent mode on websitesSupports: Consent settings affect how Google tags behave and what data is sent; Implementations need default consent state and updates based on user choice. Checked 2026-08-24.Limitation: This is Google-specific implementation guidance and is not legal advice or a universal consent architecture.

Continue the evidence path

Run your growth team from one screen.

Invite only