Google Ads Enhanced Conversions: What They Are and How to Set Them Up (Web, Leads, GDPR)

Enhanced conversions is a Google Ads feature that strengthens your conversion tracking with first party customer data. When someone submits a form or completes checkout, the tag hashes their email, phone number or address with SHA256 in the browser and sends only that hash to Google. As a result, you can connect sales back to ads even when a cookie disappears or the user switches devices.

I have managed Google Ads accounts since 2012, and in recent audits the biggest problem has rarely been ad copy. Instead, it has been missing measurement. In this guide I walk through enhanced conversions for web and for leads, setup with the Google tag and Google Tag Manager, the Data Manager changes Google rolled out this year, and the GDPR side, all based on Google's official help pages.

What are enhanced conversions in Google Ads?

Enhanced conversions is a Google Ads feature that adds hashed first party customer data to your existing conversion tag. The tag hashes email, name, address and phone with SHA256, and Google matches them to signed in accounts that engaged with your ads. As a result, you recover conversions that cookies alone would miss.

Google's help page puts it in two sentences: the feature can improve the accuracy of your conversion measurement and unlock more powerful bidding. One point matters more than it first appears. Enhanced conversions does not replace your conversion tag. The existing tag keeps working, and the new layer simply adds a second matching signal on top.

In practice, the difference shows up in a very common journey. A prospect clicks your ad on a phone, then returns three days later on a work laptop and fills in a quote form. A standard tag may fail to link those two visits. However, if the person is signed in to the same Google account on both devices, the email in your form can close that gap. In short, your measurement depends less on cookies.

Which measurement gap do enhanced conversions close?

For years, conversion tracking relied on two things: the click identifier and a browser cookie. However, both have become less reliable. Browsers shorten cookie lifetimes, visitors decline tracking in consent banners, and buyers start research on one device and finish on another.

These losses have three consequences. First, reported conversions fall below reality, so campaigns look weaker than they are. Second, Smart Bidding learns from an incomplete signal; therefore it underfunds keywords that actually drive revenue. Third, someone in a management meeting concludes that "ads do not work" based on numbers that were never complete.

To be honest, enhanced conversions will not close the entire gap. If a user never signed in to Google or never typed an email, no match happens. Still, every matched conversion is a sale you could not see before. If you are rebuilding measurement from the ground up, my guide on how to set website conversion goals is a good place to start.

What is the difference between enhanced conversions for web and for leads?

Google offers the feature in two flavours. The web version suits businesses where the conversion happens on the site: an online purchase, a sign up or a paid booking. The leads version suits businesses where the journey starts on the site but closes later, on a sales call or inside a CRM. For a quick overview, the table below compares them.

Google has now merged both versions into a single on and off switch, so you no longer pick separate implementation methods in the interface. That said, the logic behind the split still matters. You still need to know which data your site captures and which data only appears after a sale.

Which customer data does Google accept?

Google works with four data types: email address, first and last name, home or billing address, and phone number. That said, you do not need all of them. According to the official setup page, you need at least one of the following:

• An email address, which Google prefers and which gives the strongest match.
• A full address with first name, last name, postal code and country together.
• A phone number, ideally combined with an email or a full address.

My own experience is simple: forms that make email optional tend to produce weak match coverage. Therefore I make email one of the first fields on any quote or booking form. If your forms need an overhaul, my article on lead form design for bookings, quotes and demos covers the details.

Phone numbers also need the E.164 format: country code, a plus sign and no spaces, for example +447700900123. The most common mistake I see is a leading zero or brackets in the stored number. In that case the hash never lines up with Google's record, so the match quietly fails.

How does SHA256 hashing protect your data?

SHA256 is a one way hashing algorithm. It turns an input such as "name@example.com" into a 64 character string, and nobody can reverse that string back into the original address. Google hashes its own records the same way, and when two hashes line up, a match occurs.

However, you must normalize the data before hashing. Google's help centre and developer documentation ask for these steps:

1. Remove leading and trailing whitespace.
2. Convert the text to lowercase.
3. Format phone numbers to E.164.
4. Remove periods from the username part of gmail.com and googlemail.com addresses.
5. When you send data through the API, leave country, city and postal code unhashed, as the developer docs specify.

If you use the Google tag or Google Tag Manager, the tag handles normalization and hashing for you. If you upload from your own server, however, that job falls on your developers. You can check what a hash looks like with my hash generator. One warning, though: hashing does not make data anonymous. Legally, you still process personal data, and I come back to this in the GDPR section.

What should you prepare before setting up enhanced conversions?

Your base measurement has to be solid first. Adding hashed data to a broken conversion tag does not fix it; it only hides the problem. Before any setup, my team and I run through this checklist:

• Does your conversion action fire once, on the right page and on the right event?
• For purchases, do you pass an order ID (transaction ID) to the tag?
• Does your form collect an email or phone field, and do those field names stay stable?
• Is your consent banner sending Google's consent mode signals?
• Does your privacy notice explain that you share data with Google for ad measurement?
• Do you have admin access to the Google Ads account? Only an authorised user can accept the customer data terms.

If any item fails, fix it first. Accounts that already double count conversions can end up inflating numbers even further. For a quick health check of your current setup, try my Google Ads audit tool.

How do you turn on enhanced conversions in Google Ads?

In practice, the official path is short. In Google Ads, click the Goals icon, open Settings and expand the enhanced conversions section. Then tick "Turn on enhanced conversions". Google now lets you switch the feature on at account level or for individual conversion actions.

When you tick the box, Google asks you to agree to its customer data terms. By agreeing, you confirm two things: that you comply with Google's policies, and that the Google Ads Data Processing Terms apply to enhanced conversions. Therefore, do not leave this click to a junior marketer. Your data protection lead or legal counsel should read that text first.

Accounts that accepted the terms earlier need no further action, because Google migrated them automatically. If you are starting fresh, I suggest you enable the feature on your most important conversion action first and watch the results before you roll it out further.

How do you set up enhanced conversions with the Google tag?

If your site runs gtag.js directly, this is the shortest route. Google offers three ways to collect the data, and each one suits a different level of technical support.

With automatic detection, the tag scans the page for strings that look like an email or phone number. Google describes this option as low effort and suitable for most advertisers. However, if the data never appears on the conversion page, for example on a thank you page without the email, automatic detection finds nothing.

With the manual option, you define CSS selectors or JavaScript variables that point to the data. The code option is the most robust: before the conversion fires, you send a user_data object through gtag and fill in email, phone, first name, last name, postal code and country yourself. When you combine methods, Google prioritises the code snippet.

In most projects I choose the code option. The reason is simple: field names change during redesigns, and a CSS selector can then break silently. With code, the data comes straight from your backend or data layer the moment the form submits. So a theme update will not quietly damage your measurement.

What are the steps in Google Tag Manager?

If your site uses Google Tag Manager (GTM), you run the setup through your container. Here is a simplified version of Google's help page flow:

1. Turn on enhanced conversions in Google Ads and choose Google Tag Manager as the method.
2. In your Google tag settings, enable the option that allows user provided data capabilities.
3. In GTM, create a variable of the type "User Provided Data" and choose automatic, manual or code.
4. Attach that variable to your Google Ads conversion tracking tag.
5. Test the form in preview mode and confirm in Tag Assistant that the variable holds a value.
6. Publish the container, then wait for the diagnostics report.

The problem I meet most often in GTM setups is an empty variable on the thank you page. Because the form redirects, the data often does not travel with it. The usual fix is to push the email into the data layer at submission and fire the conversion on that event. Also, keep your campaign sources consistent by tagging links with a UTM builder.

Automatic detection, CSS selectors or code: which method fits?

The right method depends on how your site works. These are the criteria I use:

• Automatic detection: fine when the confirmation page shows the email clearly and you have no developer. It is quick, but you give up control.
• CSS selectors or variables: a good middle ground when your form structure is stable and you manage GTM yourself. Retest after every theme change.
• Code: the most reliable option for custom shops, bespoke software or single page apps. It takes developer time but needs the least maintenance over time.

One more caution. Automatic detection may grab any email it sees on the page. If your footer lists a company contact address, for example, the tag could pick up the wrong value. Even if you choose the automatic route, watch the diagnostics closely in the first week. If data quality looks poor, switch to the manual or code method instead.

How do enhanced conversions for leads work?

For B2B firms, service businesses and high value sales, the real value appears when the deal closes, not when the form arrives. Google's leads version closes that gap in two steps. First, the tag on your site captures a hashed email when someone submits a form. Then, once your sales team qualifies the lead or wins the deal, you upload that event back to Google Ads.

After that, Google matches the upload through the hashed data. In the words of the help page, it matches the data to the same data collected on your website and to signed in customers who engaged with your ad. That way, real revenue flows back to the exact campaign and keyword that started the journey.

Google lists three upload routes: Google Ads Data Manager, the Google Ads API and a Zapier connection. For small teams, a CRM connection through Data Manager is usually enough. If your site and CRM do not talk to each other yet, build that link first; my guide on website CRM integration and lead tracking explains the groundwork. On the campaign side, Google Ads search campaigns for B2B bid far more accurately with this data.

How do GCLID and offline conversion import fit in?

The GCLID is the click identifier Google adds to the URL when someone clicks your ad. Classic offline conversion import relied on it for years: you store the GCLID in a hidden form field, pass it to the CRM and upload it with the sale.

The leads version does not remove that model; it strengthens it. Google's upgrade guide is clear. If you do not use a tag to collect user provided data, the GCLID is required. Even with a tag, Google recommends that you keep importing existing GCLIDs, because they still help attribute offline conversions properly.

Google also recommends extra fields: order ID, conversion value and currency, a consent field, session attributes and several user identifiers where possible. For that reason, the strongest setup stores email, phone and GCLID together on every lead record in your CRM.

Do not rush the switch either. After you create the new conversion action, Google advises that you wait one to two conversion cycles or four weeks before you swap primary and secondary actions. During that window you watch conversion volume and campaign performance.

What changed with Data Manager this year?

This is the part I checked most carefully, because many older tutorials are now out of date. According to Google's official announcement, three changes stand out:

• From April 2026, Google Ads accepts user provided data from website tags, Data Manager and API connections at the same time.
• Enhanced conversions for web and for leads now sit behind one on and off switch, with no separate method selection.
• From 15 June 2026, offline conversion imports and enhanced conversions for leads uploads moved to the Data Manager API, and the Google Ads API blocks them.

Above all, the last point matters for technical teams. Google stated that developer tokens that sent no request between January and June 2026 would not receive legacy access. So if you upload through your own software and that integration has been idle, move straight to the Data Manager API rather than restarting the old one.

On the other hand, accounts that had already accepted the terms needed no action in the interface, since Google handled the migration. The place to check is the bridge between your CRM and Google Ads.

Are enhanced conversions GDPR compliant?

A clear boundary first: I am not a lawyer, and this section is not legal advice. Still, I have worked alongside data protection officers and lawyers on these setups for years, so I know which questions you need to ask.

The first question is whether you process personal data. SHA256 hashing pseudonymises data but does not anonymise it, because Google can still match it against its own records. Therefore you should assume that enhanced conversions involves personal data and a transfer to a service provider.

The second question is transparency. Your privacy notice needs to explain that you use contact data for ad measurement and share it with Google. The third question is the legal basis and any international transfer safeguards; decide both with your counsel. For advertisers based in Turkey, the KVKK adds similar duties, including the rules on cross border transfers. My guide on how to build a GDPR compliant website covers the wider framework.

How does consent mode work with enhanced conversions?

If you sell into the European Economic Area or receive traffic from the EU, consent mode becomes central to any enhanced conversions setup. Google's developer documentation lists four parameters: ad_storage, analytics_storage, ad_user_data and ad_personalization.

The key one here is ad_user_data, which sets consent for sending user data related to advertising to Google. The documentation explains that Google added it, along with ad_personalization, in a November 2023 update, and it asks sites to send both for EEA traffic. You can read the details in Google's consent mode documentation.

In practice, when a visitor declines advertising data sharing in your banner, ad_user_data goes out as "denied", and you should not use that visitor's data for enhanced conversions. That is why testing your consent banner forms part of the setup, not an optional extra. I test both paths: accept and decline.

My advice is to apply the same discipline outside the EEA. If your consent platform does not pass a refusal to Google correctly, fix that before you switch on enhanced conversions.

How do you check that enhanced conversions work?

Once setup is done, create a test conversion in GTM preview mode or with Tag Assistant. Confirm that the variable contains an email or phone number. If the variable is empty, Google receives nothing either.

Next, open the diagnostics report. According to Google's help pages, diagnostics become available roughly 48 to 72 hours after setup. You find them in the Diagnostics section of the conversion action's detail page, where you can review tag health and data coverage.

Then you need patience. Google says the impact appears in your conversion action table after about 30 days, so do not expect a big jump in week one. Meanwhile, you can compare conversion rates before and after with my conversion rate calculator.

Finally, remember that GA4 and Google Ads use different attribution logic, so their numbers will rarely match. My article on what GA4 is and how it helps covers those differences briefly.

What are the most common enhanced conversions mistakes?

The issues I find in audits look very similar from one account to the next. These come up most often:

• Wrong email: automatic detection picks up the company contact address instead of the customer's.
• Empty variable: form data never reaches the thank you page after a redirect.
• Format errors: phone numbers lack a country code or start with a zero.
• Double hashing: a developer hashes the data in advance and the tag tries to process it again.
• Missing consent signals: the banner does not pass a refusal to Google.
• Early primary switch: the new action becomes primary before the observation window ends, and Smart Bidding wobbles.

What these mistakes share is that none of them shows a red warning in the interface. Instead, campaigns keep running while data quality slips. For that reason I recommend that you open the diagnostics report at least once a week during the first month.

How do enhanced conversions affect Smart Bidding?

Target CPA, target ROAS and Maximise conversions all learn from the conversions they can see. In other words, missing conversions mean missing lessons. Once enhanced conversions recovers lost sales, the algorithm gets a clearer view of which searches and audiences really produce results.

There is a side effect, though. As reported conversions rise, CPA looks lower and ROAS looks higher. If you tighten your targets straight away, you may choke the campaign's reach. A safer path is to hold targets steady for a few weeks and then reassess with the new data.

With the leads version, the effect goes further. The algorithm stops chasing form fills and starts chasing forms that turn into revenue. For example, a keyword that brings many forms but no sales gradually loses budget. To compare your ROAS target with real profitability, my ROAS calculator helps.

Which businesses should set up enhanced conversions first?

Still, not every account has the same priority. In my experience, these businesses benefit fastest:

• B2B and service firms whose sales cycle lasts days or weeks.
• Online shops where customers research on mobile and buy on desktop.
• Accounts that use Smart Bidding but record few conversions each month.
• Lead driven businesses whose sales close by phone or in person.

By contrast, an account with no conversion tracking, or broken tracking, should not start here. Fix the base tag first, then add this layer. Otherwise you only make a flawed setup more complicated.

How do my team and I handle the setup?

When we take on an account, we start by auditing measurement. We also review conversion actions, tags, the consent banner and the CRM flow together. Then we decide which version fits the business: web only, leads, or both.

During setup we sit down with the client's developers and, where relevant, their data protection lead. We handle the privacy notice, consent mode settings and the Data Manager connection in one pass, so the technical build and the legal framework stay aligned. This work forms a standard part of our Google Ads management service.

The first month after launch is an observation period. We monitor diagnostics, compare conversion volume with the previous period, and change bid targets only after the data settles. A rushed switch can delay the benefit of a good setup by weeks.

Where should you start?

Enhanced conversions is one of the most practical ways to keep Google Ads measurement reliable as cookies weaken. Technically, the setup itself is not hard, so the tag is rarely the bottleneck. The real work lies in collecting the right data, formatting it correctly and getting the legal framework right.

My suggested order is this: verify your base conversion tag, strengthen the email field on your forms, test consent mode, and only then switch on enhanced conversions. If your sales close offline, connect the leads version through Data Manager.

Keep an eye on the official sources, because Google changes this area often. The pages About enhanced conversions and Updates to your enhanced conversions settings underpin this guide. For the leads side, bookmark About enhanced conversions for leads as well.