The Overlay URL is a credential
Anyone who can read the full URL can request the current playback state. Each plan allows 1 active Overlay link, so a leak means you revoke and paste a new one.
Keep it out of screenshots, VODs, tutorial windows, QR codes, and shared scene collections. It should never appear in a sitemap.
A local reminder, not a scanner
The check only inspects the string you paste for a query string or overlay-like path and reminds you of the risk. It never fetches the URL and never stores it.
If the tool flags it, revoke the link in your account and paste the replacement into OBS. Rotation is complete only when the old link fails.
Use the tool
Paste a URL for a local reminder: if it has a query string or an overlay-like path, treat it as a credential. Keep it out of screenshots, VODs, and sitemaps.
Frequently asked questions
Does this open or send the URL?
No. It only inspects the pasted text locally and sends nothing.
What should I do if it is flagged?
Revoke the link in your account and paste the new one into OBS.
Can the Overlay URL go in a sitemap?
No. Overlay URLs are credentials and stay out of discovery files.