The five UTM parameters
utm_source is the platform or property, such as instagram, google or newsletter. utm_medium is the channel type, such as paid-social, cpc or email. utm_campaign is the campaign or launch name.
utm_term is the paid keyword and utm_content is the creative or variant. Source, medium and campaign are required here; term and content are optional and omitted when empty.
Naming conventions matter more than the tool
UTM values are case-sensitive. “Instagram”, “instagram” and “IG” can appear as three sources. Spaces create messy reports and inconsistent grouping. Pick lowercase, hyphenated names and keep a small, documented vocabulary.
Normalization in this builder lowercases, trims and replaces spaces with hyphens. It does not invent a taxonomy for you; the team still needs to agree on source and medium names.
Preserve existing parameters
Product links often already carry ref, variant or affiliate parameters. A builder that replaces the whole query string breaks them. This tool parses the URL, keeps non-UTM parameters and the hash, and only sets the UTM keys.
If the destination already has UTM parameters, they are overwritten and a warning is shown. That is usually what you want when regenerating a link, but it should be a deliberate choice.
Never put personal data in a UTM
UTM values appear in analytics, exported reports, screenshots, browser histories and referrer data. An email address, customer name or phone number in utm_content can leak far beyond the campaign.
The builder flags email-like and phone-like values, but the check is a simple pattern. The real control is a naming policy that never includes customer identifiers.
Verify before you share
Open the generated link in a private window, confirm the landing page and parameters, then check the source/medium in GA4 realtime or your analytics debugger. A link that works but is tagged inconsistently is still a reporting problem.
Keep a campaign naming sheet with source, medium and campaign values. Review it monthly; orphaned values are a common source of “direct / none” traffic.
Where the builder stops
It does not shorten links, redirect, validate that the destination is live or reconcile platform auto-tagging. It also cannot fix a landing page that strips query parameters or a redirect that drops them.
Use it to produce a clean, encoded link. Then test the full path from click to analytics, including redirects and consent behavior.