UTM Parameters Are a Privacy Leak Nobody Talks About
Marketers love UTM parameters because they answer a real question: which campaign actually drove this click. What almost nobody mentions is that the same parameter doing that job for you is doing it for every analytics tool, ad platform, and forwarding server the link passes through on the way to its destination.
utm_source=newsletter&utm_medium=email&utm_campaign=spring_sale_2026 isn’t just marketing metadata. It’s a small, structured record of exactly how someone found a link, sitting in plain text in a URL that gets copied, forwarded, screenshotted, and logged by every server in between.
Where this actually leaks
Referrer headers are the main culprit. When someone clicks a link, the destination site often receives the full referring URL — UTM parameters included — in the Referer header. If your email campaign links to a page that embeds a third-party widget, that widget’s server may now know which specific email campaign, on which specific date, delivered this particular visitor. Multiply that across every tracking pixel, ad retargeting script, and analytics snippet on the destination page, and a UTM string built to answer “which campaign worked” ends up feeding an entirely separate ecosystem of trackers you never chose to work with.
None of this requires anyone to be malicious. It’s just what UTM parameters are: plain text, appended to a URL, read by anything that URL passes through.
What we do differently
Our UTM builder generates the same parameters marketers expect — source, medium, campaign, term, content — but the moment that destination URL (UTMs included) is set as a link’s target, it gets encrypted client-side along with everything else. The full URL, parameters and all, becomes ciphertext before it leaves your browser. It only gets decrypted at the point of redirect, and even then, only the destination is ever exposed to the browser doing the redirecting — not stored anywhere as a readable record on our end.
You still get accurate UTM-based attribution in your own dashboard, because we track which link was clicked and can associate that with the campaign metadata you set up. What doesn’t happen is your campaign structure sitting around in plaintext, one leaked-log away from telling a competitor exactly how your marketing funnel is built.
The takeaway isn’t “stop using UTMs”
UTM tracking is genuinely useful, and we’re not telling anyone to abandon it. The point is narrower: the convenience of readable tracking parameters and the privacy cost of readable tracking parameters are the same feature. Most tools ask you to just accept that. We think there’s no real reason attribution data needs to be human-readable to everything it touches along the way — it just needs to be readable to you, in your own dashboard, where you asked for it.