Lesson 10 of 14
utm_* parameters and identifiers like gclid or fbclid look like the same kind of URL junk, but they're built and consumed by completely different systems — one you hand-write for your own analytics, one the ad platform appends and reads back for its own attribution.
11 min read
Every option explains itself — why the right one is right, and why each wrong one is wrong. Miss one and it comes back later on a spaced-repetition schedule.
This topic is about judgment and practical tradeoffs more than a single right answer — a mock interview is the better way to test yourself on it.
Be interviewed on this →Hints without spoilers, and a plain explanation of why a wrong answer was wrong — answered only from this lesson. Free account, no card.
Sign up freeWhat interviewers actually ask about this, and what a strong answer has to cover.
A strong answer covers
Likely follow-ups
Two kinds of tracking parameters show up on the same marketing link, and they're easy to conflate because they look similar and arrive the same way — as a query string.
UTM parameters are five specific keys you (or your marketing team) deliberately add to a URL, meant to be read by any analytics tool:
utm_source — where the traffic came from (newsletter, google, linkedin)utm_medium — the channel type (email, cpc, social)utm_campaign — the specific campaign name (fall-launch-2026)utm_term — paid search keyword, when relevantutm_content — differentiates two links pointing at the same place (e.g. A/B testing two ad creatives)Platform click IDs — Google Ads' gclid, Meta's fbclid — are a completely different thing. You don't write these; the ad platform appends them automatically to your ad's destination URL the moment someone clicks, as an opaque identifier the platform uses to tie that click back to its own ad-serving records for its own conversion attribution (did this specific ad, at this specific auction, lead to a sale). You'll see fbclid show up on organic links too, when someone shares a link that was clicked through Facebook — that's the same auto-append mechanism, not a hand-written tag.
The distinction that actually matters: UTMs are for your cross-channel reporting (GA4, a data warehouse, any tool that isn't the ad platform itself), hand-authored and completely under your control. Click IDs are for the platform's own attribution engine, auto-generated, opaque, and not something you construct or edit — you just make sure your site doesn't strip them before the platform's own tracking snippet can read them back.
A campaign URL you build yourself, for a newsletter send:
https://example.com/pricing?utm_source=newsletter&utm_medium=email&utm_campaign=fall-launch-2026&utm_content=cta-top
The same landing page reached via a Google Ads click, with gclid appended automatically by Google — note it's there in addition to whatever UTMs you set on the ad's final URL, not instead of them:
https://example.com/pricing?utm_source=google&utm_medium=cpc&utm_campaign=fall-launch-2026&gclid=Cj0KCQiA1oS...
A link clicked from within Facebook, with fbclid appended the same way:
https://example.com/pricing?fbclid=IwAR2x9k...
UTMs and click IDs both depend on the query string surviving the trip from ad click to landing page — and both are being supplemented, not replaced, by a third mechanism as third-party cookies decline and cross-site identifiers get blocked more aggressively: first-party conversion tracking, marketed by Google as "Enhanced Conversions." The idea: instead of relying solely on a cookie or click ID to connect a later conversion back to the original click, the site sends the ad platform hashed first-party data the visitor gave you directly at conversion time — email, phone, name — SHA-256 hashed client- or server-side before it's sent, never in plaintext. The platform matches that hashed data against its own signed-in user data to recover attribution that cookie- or click-ID-based tracking alone would miss once a cookie has expired or a browser has blocked it.
gclid/fbclid are auto-appended by Google/Meta and read back by their own tracking snippets — describing gclid as "a UTM parameter" is a common and telling mistake.utm_source, utm_medium, utm_campaign, utm_term, utm_content) — anything else on a URL that looks like tracking is a different system, not a sixth UTM."What's the difference between a UTM parameter and a gclid?" is a favorite question precisely because so many candidates have pasted campaign URLs without ever being told the two systems don't share an owner — one is your own analytics contract, the other belongs entirely to the ad platform. Being able to explain why a URL-cleaning redirect breaks Google Ads attribution but leaves your own UTM-based reporting intact shows you understand these as two separate pipelines, not one blob of "tracking junk on the URL."