Owner-only, password-confirmed, audited and consent-gated. Widgets run in an isolated iframe: no parent page access, external requests, cookies, forms or admin access. Use dedicated integration IDs for Analytics, Pixel, Search Console and AdSense.