UTM parameters are short labels added to the end of a web address so that when somebody clicks the link, your analytics can record where that click came from. They are written by you, carried in the address, and read on arrival. Nothing about them is automatic, which is both the weakness and the entire point.
In short
- Labels added to a link so analytics knows where a visit came from.
- Only for links you place elsewhere, never for links inside your own site.
- Case matters, so one inconsistent capital splits a report in two.
- Google Ads does not need them and works better without.
The problem they solve
Analytics can often work out where a visit came from on its own, and often is not good enough to plan around. A visitor arriving from a search or from a link on another website usually brings that information with them. A visitor who tapped a link in a message, opened one from a document, or came through certain apps frequently brings nothing at all, and lands in the pile marked direct traffic alongside people who typed the address from memory.
That pile grows quickly for a business whose customers share links in chat, which is most businesses here. Without tagging, the report says a third of your visits came from nowhere in particular, and you cannot tell the newsletter from the Facebook post from the flyer.
The labels themselves
Three carry the reporting. The rest are optional, and only one of them comes up often.
- utm_source. Where the link was placed. facebook, newsletter, partner name.
- utm_medium. The kind of channel it is. social, email, referral, print.
- utm_campaign. Which effort it belongs to, so several links can be grouped and read together.
- utm_term. The keyword, used in manually tagged paid search and rarely otherwise.
- utm_content. Which version of the link it was, for telling two buttons in one email apart.
- utm_id. A campaign identifier, used to tie tagged links back to a campaign record. Worth knowing about, and skippable until you need it.
Google has added several more for advertising platforms, none of which a small business has to think about.
A finished link is the ordinary address, a question mark, and the labels joined by ampersands. Google publishes a builder that assembles it correctly, and using it avoids most of the syntax errors people make by hand.
Words you will hear
- Query string. The part of an address after the question mark, where these labels live.
- Source and medium. The pair that most reports group by, written together as source / medium.
- Auto-tagging. Google Ads adding its own click identifier without being asked. Preferable to doing it by hand.
- Direct. The bucket for visits with no detectable origin. Usually untagged sharing rather than people typing your address.
- Dark social. Sharing that happens in private messages, where no referrer survives. The reason tagging exists for shared links.
- Campaign builder. Google’s form for assembling a tagged link without syntax mistakes.
Consistency is the whole discipline
The tagging itself takes seconds. Keeping it usable over a year is the actual work, and it fails in one predictable way. Analytics treats these labels as literal text. Facebook with a capital F and facebook without one are two different sources. So are fb, FB and facebook.com. Nothing warns you. The report simply shows four rows where there should be one, each with a quarter of the numbers, and the effect compounds every month until comparing anything to last quarter becomes impossible.
The fix costs nothing if it happens first: decide that everything is lowercase, agree a short list of allowed mediums, and keep the whole scheme in one shared document that anybody sending a link can check. A spreadsheet listing every tagged link your business has ever published is unglamorous and it is the difference between a year of data and a year of noise.
Where they do not belong
Two places, and both cause damage rather than clutter.
- Inside your own website. Every link between your own pages.
- On Google Ads links. Anything the platform is already tagging itself.
The first is the serious one. These labels take priority over everything else analytics knows, so a tagged link from your homepage to your contact page overwrites the source already recorded for that visit. Somebody who arrived through search and then clicked the link is filed under whatever you typed, and the search that actually brought them is gone. Do this across a navigation menu and the source data for the whole site becomes fiction.
It escapes the site too. Anybody who copies that address out of their browser and shares it passes the internal label on, so future visits through the shared link carry it as well, regardless of where the sharing happened.
Google Ads is the second, for a different reason. It attaches its own click identifier and matches it against the campaign, the ad group, the keyword and the match type, which is far more than a handful of hand-written labels can carry. Analytics gives that identifier precedence over anything you add by hand, so the tags do not improve the record. They just sit in the address and turn up as a second, conflicting version of the truth in whatever other tool is reading them.
What tagging cannot tell you
It records where a click came from. It does not record what happened next, and these are separate systems that people routinely assume are one. A campaign can show a thousand tagged visits and no inquiries, and the tagging is working perfectly. The link was clicked, the visit was attributed, and the page did nothing. Knowing which source produced customers rather than visits requires a conversion to be defined and wired up first, which is the subject of the tracking entry.
Tagging without that gives you a very precise account of traffic and no account of value, which is a more comfortable report to read and a less useful one.
Start here
Take the three links your business puts in front of people most often, which for most is the website link in a Facebook profile, the link in whatever you send by email, and the one in your Google Business Profile. Tag those three, lowercase, using the same medium names each time.
Leave everything else alone for a month, then look at the report. Three clean rows that you can trust are worth more than fifty that nobody agreed the naming for.
Questions we get
More about utm parameters
Do I have to add them to every link?
Why should internal links never be tagged?
Are they case-sensitive?
Do I need them for Google Ads?
Can visitors see them?
Will they hurt my search rankings?
What does direct traffic actually mean?
Related terms
Tracking
Tracking is the wiring that records what visitors do on your site, so you can tell which marketing produced real inquiries instead of guessing.
Google Analytics 4
Google Analytics 4 is the free reporting tool that records what people do on your website and app, built around events rather than around page views and sessions.
Conversion rate
Conversion rate is the share of visitors who do the thing you wanted. It only means something once you have decided what that thing is and counted it honestly.