Privacy Policy

1. Privacy by Architecture

At UTMCraft, privacy is not an afterthought or a compliance checkbox; it is our core engineering design. Unlike traditional marketing tools that require user accounts, track your campaigns, or upload your proprietary URLs to remote database clusters, UTMCraft operates 100% in your local web browser.

All URL parsing, parameter concatenation, GA4 taxonomy checks, CSV exports, and QR code rendering execute exclusively on your computer or mobile device using modern Web Standards and Web APIs.

2. Information We Do NOT Collect

When using UTMCraft:

• No Campaign Database: Campaign inputs are processed locally and are not stored in a UTMCraft account or application database.
• No Accounts or Advertising Analytics: We do not ask for names, email addresses, company names, or payment details, and we do not load advertising or analytics trackers.
• No User Profiles: There are no user accounts, passwords, or cloud databases tracking your workflow.
• No Cross-Site Advertising Beacons: We do not embed third-party advertising cookies, retargeting pixels (such as Meta Pixel or TikTok Pixel), or biometric trackers on this website.

3. Local Storage Transparency

UTMCraft uses the standard HTML5 localStorage API built into your browser to provide a seamless user experience. This data never leaves your device:

• utmc_theme: Remembers your UI theme preference ("light" or "dark").
• utmc_custom_presets: Stores any custom channel presets you create so you can reuse them across visits.
• utmc_history_v2: Keeps a local record of URLs you generated or bookmarked, allowing you to search and export them to CSV.

You have 100% control over this data. You can delete individual links at any time or click the "Clear All" button in the History tab to immediately wipe the local storage table.

4. URL Shortener Service Privacy

UTMCraft includes an optional URL shortening feature. When you explicitly click the "Shorten" button:

• The final concatenated UTM URL is sent to a public URL redirection service (e.g. spoo.me, da.gd, or clck.ru) to retrieve an HTTP 301/302 short link.
• The shortening provider receives the complete destination URL and ordinary network metadata such as your IP address. Do not place personal or confidential data in a URL.
• If you prefer complete air-gapped isolation, you can use the standard "Copy Campaign URL" button without activating the shortener.

5. Compliance with Global Privacy Frameworks (GDPR, CCPA, CPRA)

UTMCraft minimizes application-level data collection, but legal compliance depends on your jurisdiction and how you use generated URLs:

• Hosting: Our hosting provider may process standard request metadata, such as IP addresses and access logs, to deliver and secure the website.
• Third Parties: Google Fonts is requested for typography, and optional shortening providers process URLs only when you choose the Shorten action.
• Right to Erasure: Because data is stored in your own browser's local storage, clearing your browser cache immediately and permanently erases all records.

6. Security Architecture

UTMCraft is served over modern encrypted HTTPS with strict HTTP security headers, including Content-Security-Policy, X-Content-Type-Options: nosniff, X-Frame-Options: DENY, and strict Referrer-Policy.

7. Contact & Questions

If you have any questions or feedback regarding our privacy practices, please view our source code on GitHub or review our Terms and Conditions.