UTM parameters break silently—here's the character limit
The cafés along Market Street are filling with laptop operators nursing cold brew, each browser tab a different dashboard, each dashboard showing traffic that arrived from somewhere—maybe. Outside, the morning fog hasn’t lifted yet.
UTM parameters hit character limits that silently corrupt your attribution data
Most analytics platforms truncate or reject UTM tags past a hidden threshold, and you won’t know until the data’s already wrong.
UTM parameters are the five query-string fragments—source, medium, campaign, term, content—that tell Google Analytics, Plausible, or your ESP where a visitor came from. You append them to every link in your welcome sequence, every social post, every sponsor placement. They work until they don’t, and the failure mode is silent: no error message, no warning, just attribution that says “direct” when it should say “newsletter-issue-247-sidebar-cta”.
The trouble starts with length. Google Analytics has documented but rarely enforced limits around 2048 characters for the entire URL, but individual UTM values face their own caps depending on the platform ingesting them. Reserved characters—ampersands, equals signs, question marks, hash symbols—can terminate a parameter early or split one tag into two. URL encoding helps, but only if your link-shortener, email client, and analytics stack all decode consistently. They don’t always.
Platform-specific parsing adds another layer. Facebook’s click ID (fbclid) appends itself after your UTMs and can push total URL length over the edge. LinkedIn strips query parameters from URLs in some post formats. Substack’s link-tracking wrapper rewrites your UTM tags if you paste a URL directly into the composer instead of using markdown. Each rewrite or truncation event creates a new “untracked” bucket in your dashboard, and you only notice when this month’s campaign attribution looks thinner than last month’s.
The fix is a two-part audit: measure the character count of your longest campaign URL in its final rendered form—after shortening, after platform rewriting, after the recipient’s mail client processes it—and then test that URL in each analytics tool you use. If any tool reports a different campaign name or drops the parameter entirely, you’ve found your ceiling. Stay ten characters below it.
TACTIC
When your analytics export schedule deletes data you thought you saved
Most operators export campaign performance once a quarter, assuming the CSV will sit in Google Analytics or Plausible indefinitely. It won’t. Platforms auto-delete scheduled exports after thirty to ninety days, and some don’t store raw event data past thirteen months. If you’re running year-over-year attribution analysis or building a sponsor media kit from historical click data, the numbers you need may already be gone. Knowing which export schedules preserve data and which create gaps means you can set a recurring calendar reminder to pull and archive reports before the platform purges them.
WORTH READING
Referrer blocking strips the signal you use to attribute traffic sources
Browsers, VPNs, and privacy-focused extensions routinely strip the HTTP referrer header before a visitor lands on your page. That header is how your analytics platform knows someone came from Twitter, a forum thread, or another newsletter. When it’s missing, every visit looks direct, even when it wasn’t. The gap is widening—some estimates put referrer-blocked traffic above twenty per cent on privacy-conscious audiences—and most operators don’t notice until they compare dashboard totals to link-click counts from the originating platform and find a thirty per cent shortfall. There are workarounds, but they require changing how you tag outbound links before you share them.
FROM THE ARCHIVE
Social platforms rewrite or strip links, and each one does it differently
You paste a carefully tagged URL into LinkedIn, X, Threads, or Bluesky, and each platform processes that link before publishing. Some wrap it in a click-tracker that preserves your UTM parameters. Others strip query strings entirely to reduce spam or shorten visible text. A few rewrite the domain through a redirect service, and if that service times out, your link dies. Knowing which platforms leave your attribution intact and which silently break it means you can choose where to post a campaign link versus where to use a link-in-bio page or a shortener that logs clicks independently of the social network’s behaviour.
Know someone who would like this? Forward today’s email—every operator we reach is one closer to running an online business with a little less friction.