That Flyer From 2022 Is Still Working Overtime — And Not in a Good Way

Pull open the drawer in your front desk. There's a stack of postcards from that 2022 spring promotion. A roll of stickers with a QR code from the grand opening. Maybe a stack of business cards with a short link printed in the footer. Here's the uncomfortable truth: every one of those links probably still works. And every click they get is still being logged somewhere.

For most small business owners, that's a shrug. For the ones who've had to answer a customer privacy question, or a lawyer's letter, it's a cold sweat. Let's talk about link rot, zombie links, and how to clean house without breaking the things that still earn their keep.

The Links You Forgot Are the Ones Still Collecting

A short link doesn't expire just because your campaign did. That promo URL on a flyer handed out at a farmers market in Austin? Alive. The one in your old Gmail signature? Alive. The QR decal on the delivery van you traded in? Very much alive, and somebody new is scanning it every week.

The problem isn't the clicks themselves — it's what happens after the click. If the destination page was deleted during a website redesign two years ago, those visitors are landing on a 404. If the link was set up with aggressive tracking parameters you no longer use, every scan might still be dropping cookies or logging device data under a privacy policy that no longer matches what your site actually does.

In a post-CCPA world — where California, Virginia, Colorado, and a growing list of states have their own consumer privacy laws — "we forgot about that link" is not a defense. It's a discovery exhibit.

What a Forgotten Link Can Actually Cost You

Let's be concrete about the risks:

• Dead-end redirects. Customers hit a broken page and associate your brand with a dead website. Cheap damage, but real damage.
• Stale tracking. Old links sometimes carry UTM parameters or third-party pixels that were retired from your main site — except the redirect still fires them. That's data collection happening outside your current consent flow.
• Policy mismatch. Your current privacy policy says you collect X. A legacy link collecting Y contradicts it. Congratulations, you've made a written statement that isn't true.
• Pointing somewhere embarrassing. We've all heard the horror story of the domain that lapsed and got bought by someone else. If your short link points at a destination you no longer control, fix it yesterday.

None of these mean you need a compliance officer on retainer. They mean you need an afternoon and a spreadsheet.

The 60-Minute Link Audit

Here's the framework we'd suggest to any US small business sitting on a few years of accumulated marketing debris.

Step 1: Inventory everything. Log into your link management tool and export your full link list. Then hunt down the ones that aren't in there — old email signatures, printed materials, social bios, Yelp listings, the footer of a website you built in 2021. Anything you can't find or don't control, flag it.

Step 2: Sort into three buckets. Keep (still driving meaningful traffic), Update (live traffic but pointing to a dead or moved page), and Retire (no clicks in six months, or tied to a campaign that's over).

Step 3: Update before you delete. For links in the Update bucket, you don't need to reprint anything. That's the entire point of a redirect — change the destination, and every flyer and business card in circulation instantly points somewhere new. A page that went dark during a redesign can quietly come back to life as a landing page that says "this promotion ended, but here's what we're doing now."

Step 4: Retire with intent. Don't just delete links that are still being clicked. Redirect them to your homepage or a graceful "offer expired" page first, watch the click volume for a month, then pull the plug. And when you retire a link, retire its data collection with it — turn off any tracking attached to it.

Step 5: Write it down. A one-page record of what you audited, what you changed, and when. If a privacy question ever comes up, that document is worth more than a hundred hours of worrying.

Make It a Habit, Not a Panic

The businesses that get burned by old links are the ones who only think about them when something breaks. Put a recurring calendar reminder — quarterly works for most — to scan your link dashboard for anything with zero clicks or a dead destination. Five minutes a quarter beats a week of cleanup after a customer complaint.

Your links are assets. But like any asset, they need maintenance, and some of them need to be taken out back and retired. Better you decide when that happens than a 404 page — or a regulator — deciding for you.