That Code Snippet Google Handed You? Here's Where It Actually Goes.

That Code Snippet Google Handed You? Here's Where It Actually Goes.

Every third-party tool does the same thing. You sign up, click through a setup wizard, and land on a screen that says something like "paste this snippet before the closing head tag." Google Analytics does it. Facebook Pixel does it. Every chat widget, every heatmap tool, every scheduling embed does it. Nobody explains where that actually goes if you don't run your own server.

On Cantrip there are two answers, and which one you need depends on what you're pasting.

If it's Google Analytics or Google Tag Manager

Those two get their own dedicated field. Open your website's Settings and there's a spot for your Google Analytics ID and a separate one for your GTM container ID. Drop the ID in, save, and Cantrip wires it into every page for you. No snippet to paste at all.

Everything else goes in Scripts

Facebook Pixel, Intercom, Calendly, a heatmap tool, whatever vendor hands you a chunk of HTML or JavaScript this week: that's what the Scripts section under your website's settings is for. It's a short list rather than one giant text box, and each entry holds:

  • A title, so you remember what it is six months from now
  • A placement: head or body, whichever the vendor's instructions ask for
  • An on/off toggle
  • A code box where you paste exactly what they gave you

Save it, and Cantrip drops that code onto every page of your site, in the spot you picked. No FTP. No editing a theme file. There's no way to scope a script to just one page either, it runs site-wide, so it's built for the stuff you actually want on every page: analytics, a chat bubble, a tracking pixel.

The honest caveat

Whatever you paste in there runs, unmodified, on your live site. Cantrip doesn't strip tags or sandbox it, because the whole point is letting real third-party embeds work. That's normal for this kind of feature (WordPress plugins that do the same thing behave the same way), but it means the only thing standing between "harmless analytics snippet" and something sketchy running on your website is you knowing where the code actually came from. Paste from vendors you signed up with directly, not from a forum post promising to speed up your site.

And if you want to pause something instead of losing it, use the toggle. Turning a script off keeps the entry saved, so you're not digging up the snippet again if you turn it back on next month.