AIdea Click Tracker

AIdea Click Tracker is the click-tracking service AIdea operates for the medical and dental clinics whose Google Ads accounts we manage. It is used only in the Google Ads tracking template; the ad's final URL stays the clinic's own website or the clinic's own LINE official account.

Tracking domains: aideaclick.link, aideatrack.link. Each advertiser has its own subdomain, named after its Google Ads customer ID (<customer-id>.aideaclick.link), and that subdomain only ever redirects to that advertiser's own destinations, so one advertiser cannot affect another.

How a tracked click works

1. Google Ads expands the tracking template, for example
   https://1234567890.aideaclick.link/t?gclid={gclid}&cmp={campaignid}&redirection_url={lpurl}
2. With parallel tracking the visitor goes straight to the final URL while the browser sends this request in the background.
3. The endpoint answers HTTP 302 to the URL given in the redirection_url parameter and records the click. No other parameter is read as a destination.

Transparency guarantees

• Transparency parameter: redirection_url= (URL-encoded absolute http(s) URL). It is the only redirection target; there is no server-side default destination. force_transparent=true is accepted and has no effect because the parameter is always followed.
• Paths: /t is the only redirect path on the tracking domains. Apart from this page (/) and the privacy policy (/privacy), every other path returns 404.
• Same behaviour for everyone: GET, POST and HEAD all return the same 302. The redirect does not vary by user agent, IP address or referrer.
• Server-side validation: to prevent misuse as an open redirect, each advertiser subdomain only follows that advertiser's own destinations: any page on its registered website, or otherwise only the exact final URLs (host, path and their identifying query parameters) that its own Google Ads ads use, synced daily from the Google Ads API. Shared platforms such as LINE or Facebook are always matched by exact link. URL shorteners and our own domain are never followed. Anything else gets HTTP 400 with an empty body and no redirect.
• No modification of the final URL: the destination is passed through as given. No UTM, affiliate or other parameters are added or removed; the service adds no parameters of its own.
• No intermediate hops: the 302 points directly at the destination. Nested click trackers are not used.
• No content, no cookies: the response has an empty body, sets no cookies and is sent with Cache-Control: no-store. All domains are served over HTTPS.

What is recorded

For accounts we manage, each click stores the Google Ads ValueTrack values (gclid, campaign, ad group, creative, keyword, match type, device, network), a timestamp and a keyed one-way hash of the device. No IP address, user-agent string or cookie is stored. Details are in the privacy policy.

Contact

AIdea · ai@aideamed.com