Privacy Policy
Effective Date: September 29, 2026 • Last Updated: September 29, 2026
1. Browser Processing and Website Services
URL construction, inspection, validation, bulk generation, and QR rendering run in your browser. UTMCraft has no user accounts or application database for campaign fields. That does not mean all website activity stays on your device: the site loads Google Analytics 4, requests fonts from Google Fonts, and can send a URL to a shortening provider when you choose that feature.
2. Campaign Data and Website Analytics
When using UTMCraft:
- Google Analytics: The shared site module loads Google Analytics 4 to measure visits. The analytics request may include the current page URL (including its query string), referrer, device and browser details, and analytics identifiers or storage values. Do not put personal or confidential information in a page URL.
- Google Fonts: Pages request font files from Google Fonts. Those requests go to Google and include ordinary connection information needed to serve the files.
- No application account: The site does not provide accounts or a cloud campaign-history feature. The browser stores selected settings and generated history locally as described below.
- Consent interface: The current implementation does not include a cookie-consent banner or consent-management interface. This notice does not determine whether the analytics setup meets requirements in any particular jurisdiction.
3. Local Storage Transparency
UTMCraft uses browser localStorage for settings, custom presets, and campaign history. These entries remain in the browser profile unless cleared; they are not synced to a UTMCraft account.
utmc_theme: Remembers your UI theme preference ("light"or"dark").utm_custom_presets_v1: Stores custom channel presets.utm_campaign_history_v1: Stores generated URLs, optional short URLs, parameter values, and timestamps for local history and CSV export.utmc_destination_url: Remembers the most recently entered destination URL.utmc_rule_auto_apply: Remembers the auto-apply setting for URL rules.
utmc_theme stores the selected light or dark theme. UTMCraft does not set its own cookies in the application code. Google Analytics may use cookies or similar browser storage separately. Use the app's history and preset controls or your browser's site-data settings to clear locally stored items.
4. URL Shortener Service Privacy
URL shortening is optional. When you click Shorten, the app tries da.gd and, if needed, fallback providers spoo.me and clck.ru. Depending on success or failure, one or more providers may receive a request containing the complete destination URL.
- A provider receiving the request also receives network information such as your IP address. UTMCraft does not control provider logging or retention.
- Use a copy action instead of Shorten if you do not want to send the destination URL to a shortening provider. Google Analytics and page resources are still separate third-party requests.
- Do not include personal or confidential information in a URL you shorten.
5. Hosting, Contact, and Privacy Scope
- Hosting: The hosting provider may process standard request information, such as IP addresses and server logs. The provider and its retention period are not identified in this notice.
- Contact email: The contact form opens a prefilled email draft in your email application; it does not submit the form to a UTMCraft server. If you choose to send the email, your email provider transmits it to contact@utmcraft.com.
- Local data: Clearing browser site data removes local settings and history. It does not delete information already sent to Google, a shortening provider, your hosting provider, or an email provider.
Privacy and cookie rules vary by jurisdiction. This page describes the current implementation; it is not a legal assessment or a claim of compliance with any privacy framework. Have qualified privacy counsel review the analytics, consent, hosting, and contact practices for the places where the site is used.
6. Security Architecture
UTMCraft is served over modern encrypted HTTPS with strict HTTP security headers, including Content-Security-Policy, X-Content-Type-Options: nosniff, X-Frame-Options: DENY, and strict Referrer-Policy.
7. Contact & Questions
If you have any questions or feedback regarding our privacy practices, please contact our team directly at contact@utmcraft.com or visit our Contact Page.