Consent-first tracking for healthcare websites

Measure every conversion. Share zero PHI.

COMPLI3D blocks every tracking script until a visitor opts in, then reports conversions to your ad networks server-side, with nothing that identifies the patient or the care they looked for.

Free. We load your public pages the way a visitor's browser does. No health information is asked for or collected.

Book a demo
One conversion, three stopsSample data
Visitor's browser
page_urlexample.org/detox/insurance-check
emailj.doe@example.org
ip203.0.113.24
gclidCj0KCQiA8x7Q
Advertising: opted in
COMPLI3DServer-side
page_url/detox/insurance-checkremoved
emailj.doe@example.orgremoved
ip203.0.113.24removed
gclidCj0KCQiA8x7Qkept
codec_7f3aadded
Ad network
click_idCj0KCQiA8x7Q
eventc_7f3a

No page. No email. No IP address. No service line.

Reports conversions to the ad networks you already use

  • Google Ads
  • Meta
  • Microsoft Ads
  • TikTok
  • LinkedIn
  • Reddit
  • Snapchat
  • Pinterest

Wordmarks shown as text until partner logo files are approved. [PARTNER LOGOS]

The problem

Tracking pixels were built for retail, not for care.

Pixels on healthcare websites send page URLs, form data and identifiers to ad platforms. That has drawn federal regulatory guidance on online tracking, class-action pixel litigation, and a wave of wiretap demand letters aimed at treatment providers.

HHS OCR · 45 CFR Parts 160 and 164

Guidance on online tracking technologies

The HHS Office for Civil Rights issued a bulletin on how HIPAA applies to tracking technologies on regulated entities' websites, revised it in 2024, and part of it was vacated by a federal court that year. [VERIFY CURRENT STATUS]

18 U.S.C. § 2511 · Cal. Penal Code § 631

Class actions over pixels

Pixel class actions commonly plead the federal Wiretap Act and state laws such as the California Invasion of Privacy Act, alleging that an ad platform received what visitors viewed or typed.

Read 18 U.S.C. § 2511Not legal advice.
Wiretap demand letters

Letters aimed at treatment providers

Demand letters cite the same statutes and ask for a settlement before any suit is filed. They typically point to scripts that loaded before the visitor made a choice.

Two sides of one conversion

You see the admission. The ad network sees a code.

Your dashboard keeps the full context. The ad network gets enough to attribute the click, and nothing about the person or the care.

What you seeSample data

Admissions inquiry

Conversion
Admissions inquiry, Detox, Palm Beach
Source
Google Ads · Detox brand campaign
Page
/detox/insurance-check
Contact
Call · 4 min 12 s
Time
14 Nov 2026, 09:42 ET
What the ad network sees

Opaque conversion code c_7f3a

click_id
Cj0KCQiA8x7Qkept
event
c_7f3a
page_url
/detox/insurance-checkremoved
email
j.doe@example.orgremoved
ip_address
203.0.113.24removed
How it works

Four steps from snippet to dashboard.

  1. Step 1: Install the snippet

    One script tag, first in your site's head. Works with WordPress, Webflow and custom sites.

  2. Step 2: The gateway takes control

    Every script is inventoried and held until the visitor opts in to its category.

  3. Step 3: Conversions relay server-side

    Calls, forms and chats reach each ad network as a click ID and an opaque code.

  4. Step 4: Review your dashboard

    See each conversion in full, and each script with its status.

Security and BAA

Built for HIPAA-regulated organizations.

We sign a business associate agreement. Identifiers are removed on our servers before a conversion is sent, and you decide how long the rest is kept.

HIPAA · 42 CFR Part 2 · BAA available

Business associate agreement

Available on every paid plan. [VERIFY]

Encryption

In transit and at rest. [VERIFY STANDARD]

Retention you set

Conversion records kept for the period you choose. [VERIFY DEFAULT]

Access controls

Role-based access and an audit log. [VERIFY]

Compare

A consent banner alone does not move your pixels.

Most tools do one half of the job. COMPLI3D holds scripts until opt-in and removes identifiers before a conversion leaves.

How COMPLI3D compares with a consent banner alone and with server-side tagging alone
CapabilityCOMPLI3DConsent banner onlyServer-side tagging only
Holds scripts until opt-inYesYesNo
Removes identifiers before ad networksYesNoIf you configure it
Opaque conversion codesYesNoNo
Business associate agreementYes[VERIFY][VERIFY]
Who builds it

Built by operators, not just engineers.

COMPLI3D comes from the team behind DIAL3D. We run marketing for behavioral health organizations: paid search, call tracking, websites. We built the tool we needed for our own sites.

About COMPLI3D
Customer
[CUSTOMER QUOTE]
[NAME][TITLE, ORGANIZATION]
Questions

Plain answers.

Ask us something else
Does COMPLI3D make my website HIPAA compliant?

No tool can do that on its own. COMPLI3D gives you control over which scripts load and what leaves your site. Compliance depends on how you configure it and on the rest of your program, so involve your counsel.

Can I still measure ad performance?

Yes. Conversion Relay reports each conversion with the click ID from the ad, so the network can attribute it to the click. It never receives the page, the form or the person.

What does the free scan check?

It loads your public pages the way a visitor's browser does, lists every script that runs before a choice is made, and shows where each one sends data. It does not ask for or collect health information.

Do you sign a business associate agreement?

Yes, a business associate agreement is available. [VERIFY PLAN SCOPE]

Does it replace my tag manager?

It can. Because the gateway controls every script on the page, you can load and govern your tags from COMPLI3D and retire a separate tag manager.

How long does setup take?

The snippet takes minutes. Mapping your conversions takes longer, and we do it with you. [SETUP TIME]

Free tracking scan

See what your site sends today.

A report of every script that loads before consent and where it sends data.

Or book a demo