How Safari Strips Tracking Parameters from URLs
This article explains how Apple's Safari web browser protects user privacy through Link Tracking Protection, a feature that automatically identifies and removes known tracking parameters from web addresses. It covers what URL tracking parameters are, the exact mechanism Safari uses to detect and strip them without breaking website functionality, and how the feature operates across both Private Browsing and standard browsing modes.
Understanding URL Tracking Parameters
Websites and advertisers frequently append extra data to the end of a standard web address, known as query parameters. While some parameters are necessary for a website to function—such as loading a specific search result or product page—others exist solely to track user behavior across the internet.
When you click a link on a social media platform or in a promotional email, the platform often attaches a unique identifier to the URL. Common examples include:
fbclid(Facebook Click Identifier)gclid(Google Click Identifier)msclkid(Microsoft Click Identifier)mc_eid(Mailchimp Email Identifier)
When the destination website loads, embedded scripts read these parameters to link your current browsing session back to your profile on the originating platform.
How Safari Removes the Trackers
Introduced in Safari 17 (across iOS 17, iPadOS 17, and macOS Sonoma), Link Tracking Protection neutralizes this tracking method before the destination webpage even loads. Safari accomplishes this through a three-step process integrated into its Intelligent Tracking Prevention (ITP) engine.
1. URL Interception and Parsing
When you click a link, paste a URL into the address bar, or copy a
link to share it, Safari intercepts the web address before initiating a
network request. The browser's engine parses the URL, separating the
base address (the domain and path) from the query string (everything
following the ? symbol).
2. Pattern Matching Against a Known List
Safari maintains an on-device list of known user-identifying tracking parameters, which Apple updates periodically. The browser compares the keys in the URL's query string against this blocklist.
Safari specifically targets parameters that carry unique, per-user or
per-click identifiers. It generally ignores generic campaign parameters
(like standard utm_source tags) if they only identify an
advertising campaign broadly rather than tracking an individual
user.
3. Surgical Stripping
If a match is found, Safari rewrites the URL by deleting the tracking parameter and its associated value. This removal is surgical. If a URL contains both a functional parameter and a tracking parameter, Safari only removes the tracker.
For example, if you click a link formatted as:
https://example.com/shoes?color=blue&fbclid=IwAR123456789
Safari strips the Facebook tracker and requests the following clean
URL from the server:
https://example.com/shoes?color=blue
Because the stripping happens locally on the device prior to the network request, the destination server never receives the tracking ID, while the page still correctly loads the "blue shoes" filter.
Private Browsing vs. Standard Mode
By default, Safari applies Link Tracking Protection only in Private Browsing mode (as well as links shared within the Apple Mail and Messages apps). However, users can manually extend this exact same URL-stripping mechanism to standard browsing mode.
The underlying technology does not change between the two modes; it is controlled entirely by a user preference toggle.
To enable URL stripping in standard mode:
- On iOS and iPadOS: Go to Settings > Safari > Advanced > Advanced Tracking and Fingerprinting Protection, and select All Browsing.
- On macOS: Open Safari, go to Settings (or Preferences) > Advanced, check the box for Use advanced tracking and fingerprinting protection, and set the dropdown menu to in all browsing.
Once enabled for all browsing, Safari will intercept, evaluate, and sanitize URLs in standard tabs just as aggressively as it does in Private Browsing tabs.