Strip tracking parameters (UTM, fbclid, gclid, and 15+ more) from URLs. Local processing, free, no signup.
Content reviewed October 2026 · About Toolzum
Parse any URL into its components — protocol, hostname, path, query parameters, hash, and more with copy-to-clipboard. Host, path, query, and fragment split with decoding — debug redirect chains precisely. Runs locally, free, no signup.
Decode QR codes from uploaded images. Scan any QR code image and extract the embedded text or URL. Point it at screenshots, photos, or documents — decoded URLs and text copy out instantly. Runs locally, free, no signup.
Flatten JSON objects into URL query strings — nest with bracket notation. Build ?filter[x]=1 links from API objects — local conversion, free, no signup.
Shorten hundreds of URLs in one batch with automatic provider failover — paste a list, get clean links for campaigns and bios. Marketers prep 200 UTM links before launch — managed shortening (~10/min pace), sign in free.
Renders a scannable QR code from any text or URL with a client-side Reed-Solomon encoder at fixed high error correction. Customize size, colors, and center logo, then download the PNG — free, local, no signup.
UTM tags, fbclid/gclid click IDs, session tokens in query strings, and userinfo credentials. The destination stays identical; surveillance doesn't.
Clean only — the tool strips listed tracking parameters and returns a clickable URL. No defang (hxxp://) mode.
None — no homograph or suspicious-TLD flagging. Sanitizing never makes a malicious link safe to visit. Verify sender separately.
No — sanitizing runs locally in your browser. URLs never leave your device.
IP Reputation Checker
Look up IP geolocation context — city, region, country, hostname, and ASN/org via ipinfo.io. No blocklist verdicts: abuse and blacklist checks are honest link-outs to AbuseIPDB and VirusTotal. Queried IPs leave the browser by design — live lookup, free, no signup.
CORS Inspector
Run a real CORS preflight from your browser — a cross-origin request that shows whether an endpoint allows it, with the exact server headers to confirm.