Install guide · no-code · ~3 min
Settings → Custom Code → Head.
Wix exposes a Custom Code panel in site settings. Admaxxer should be added with placement "Head" and "Load on each new page" so the pixel fires on every route.
In your Wix dashboard, go to Settings → Advanced → Custom Code, then click + Add Custom Code.
Set Add Code to Pages to "All pages" and Place Code in to "Head". Paste the snippet below and save.
<script defer
data-website-id="YOUR_WEBSITE_ID"
data-domain="yourdomain.com"
src="https://admaxxer.com/js/script.js"></script>
Choose Load code once so the pixel initializes once per session, not per route change (the Admaxxer pixel handles SPA navigation internally).
Load any public page on your site in a fresh browser tab. Within a few seconds, the Admaxxer dashboard realtime view should show the event. If nothing lands after 2 minutes, re-check the snippet is actually in the rendered HTML <head> (View Source, not just DevTools).
<script> injection at the platform CSP layer — the Custom Code panel is not even exposed under Settings → Advanced. Fix (option 1): upgrade to a Premium plan ($16+/mo) which unlocks Custom Code. Fix (option 2, no upgrade): use Wix's Tracking Tools & Analytics panel instead (Settings → Marketing → Tracking Tools & Analytics) which has its own injection mechanism that bypasses the CSP block. Add a Custom tracking tool, paste the snippet, set scope to All pages, save. Both paths land the same pixel.Content-Security-Policy response header on some sites that limits which third-party origins can load scripts. The pixel snippet is rendered correctly, but the browser blocks the https://admaxxer.com/js/script.js request before it executes. Symptoms: DevTools Console shows "Refused to load the script ‘https://admaxxer.com/js/script.js’ because it violates the following Content Security Policy directive: script-src …". Fix: contact Wix support and ask them to allowlist admaxxer.com in your site's CSP — they handle this on a per-site basis. While waiting, you can self-host via the script.local.js variant (proxied through your own domain) which sidesteps the third-party origin check entirely.