Privacy
Your URLs stay in your browser
Last updated: November 6, 2026
URL parsing, CSV parsing, auditing, suggested fixes, approvals and CSV export run as browser-side JavaScript. The URLs and CSV files you provide are not sent to an audit endpoint, database, language model or analytics service by this application.
Local processing
When you paste URLs or select a CSV, your browser reads the text and keeps it in page memory. The audit engine compares each URL with the naming rules you configured. There is no server-side rendering of your input, no API route, and no Server Action that receives the list.
The tool does not make network requests to the URLs being audited. It does not check whether a landing page exists, follows redirects, or loads third-party pixels.
What this application does not collect
- Pasted URLs, CSV contents or UTM parameter values.
- Names, email addresses, accounts or payment details.
- A history of previous audits or exported reports.
- Advertising identifiers or cross-site tracking data.
This build does not include a contact form or user database. If you deploy a customized version, the operator of that deployment is responsible for any additional data handling they add.
Hosting and standard logs
Like most static websites, the hosting provider may keep conventional access logs for page and asset requests. Those logs can include an IP address, user agent, requested page, timestamp and similar request metadata. They do not contain the URLs you paste into the audit form, because that text is processed in the browser and is never part of a request to this site.
The specific retention period and legal basis for hosting logs depend on the provider and the deployment configuration. Review the hosting provider's privacy documentation before publishing a production instance.
Cookies, storage and analytics
The application code does not set cookies and does not use localStorage or sessionStorage to persist your input. Reloading the page clears the tool state. A static host can still set its own security or load-balancing cookies; check the hosting provider's documentation for the deployment you use.
No third-party analytics, advertising or session-replay script is included in this build. The site uses system fonts and serves its own static assets, so loading a page does not call a third-party font or analytics domain.
Downloads and outbound links
The audit report is generated in your browser as a Blob and downloaded to your device as utm-audit-report.csv. It is not uploaded by the application. You choose where to store or share it.
The naming guide links to Google Analytics documentation and other pages on this site. Following an external link leaves this application and is subject to that site's privacy policy.
Changes to this notice
If the product later adds analytics, accounts, a backend or a feedback form, this page must be updated before those features are enabled. The core privacy promise for this MVP is narrow and specific: the audit runs locally, and the URL list is not sent to this site or to an audited destination.
Read more about the product scope and limitations, or return to the UTM checker.