The Blocking tab carries a built-in list of 36 services. Each one is held until its group is accepted, and you can change any of them.
The services table
Under The services, each row shows the Service, a Hold until choice, and What it is. Services the scanner has seen on your pages carry an on your site badge. The Hold until menu offers Never block plus the groups, so you can move a service or exempt it.
What is on the list
- Analytics: Google Analytics, Google Tag Manager, Microsoft Clarity, Hotjar, Matomo, Segment, Mixpanel, Amplitude, Plausible and Fathom Analytics.
- Marketing: Meta (Facebook) Pixel, Google Ads / DoubleClick, LinkedIn Insight, TikTok Pixel, X (Twitter) Ads, Pinterest Tag, Microsoft Advertising (Bing), HubSpot, Klaviyo, Mailchimp, ActiveCampaign, ShareThis / AddThis and YouTube.
- Preferences: Vimeo, Google Maps, SoundCloud, Spotify, Intercom, Crisp Chat, Tawk.to, Disqus and Wistia.
What is never blocked by default
Google reCAPTCHA, Stripe, PayPal and Cloudflare are marked Essential and start as Never block, so your checkout and your forms keep working. Google Tag Manager is also left running while both Consent Mode switches are on, because blocking the container blocks every tag inside it. Your own choice in the Hold until menu always wins, and only the choices you actually change are saved: a service you leave alone keeps following its switches, so Tag Manager is held again the moment you switch Consent Mode off.
Adding your own rule
Under Anything else, the Your own patterns box takes one rule per line: a piece of the script's address, then |, then the group.
tracker.example.com | marketing survey-widget.js | preferences
Scripts are recognised however the code is written, with or without quotes around its address, so older pasted snippets are held too. A line with no group is treated as marketing, and lines starting with # are ignored. The pattern is matched against the script's address and its inline code, so a distinctive word from the code works as well as a domain. Use the group words preferences, analytics, marketing or unclassified. Press Save blocking when done.
The support switch for testing
If something on a page stops working, sign in as an administrator and add ?rxc-no-block=1 to the end of its address, like this: https://yoursite.com/contact/?rxc-no-block=1
That turns blocking off for that one page load, for you only. For anybody who is not signed in as an administrator the switch does nothing, so a link carrying it can never switch blocking off for your visitors, and the unblocked page is never cached. If the page behaves with it on, a blocking rule is the cause: set that service to Never block, or move it to a group your visitors accept.
Checking it works
In a private window, view the page source and search for text/plain: every parked script is there. Accept, and they come back.