ChatGPT Now Runs Ads With 4 Encrypted Tracking Tokens Per Click — Here’s the Full Spy Loop
ChatGPT Now Runs Ads With 4 Encrypted Tracking Tokens Per Click — Here’s the Full Spy LoopOpenAI quietly turned your AI conversations into an ad platform — and the tracking is more aggressive than Google’s
$100 million in ad revenue. In six weeks. 600+ advertisers. And a tracking SDK called OAIQ that watches what you do AFTER you click.
WAIT. Remember when ChatGPT was just… a helpful chatbot? That thing you asked to write your cover letters and debug your code? Yeah, it’s an ad machine now. OpenAI flipped the switch on May 5th, opened a self-serve Ads Manager to every US business, and the tracking infrastructure underneath it is — I’m not going to lie — kind of insane.
🧩 Dumb Mode Dictionary
| Term | What It Actually Means |
|---|---|
| OAIQ SDK | A tiny piece of code OpenAI makes websites install. It watches what you browse AFTER you click a ChatGPT ad. Think of it like a security camera in the store you walked into. |
| Fernet-encrypted tokens | Coded tracking tickets attached to every ad click. 4 of them. Like getting stamped at 4 different clubs so they all know you were there. |
| Conversions API | A back-channel that lets companies secretly tell OpenAI “hey, that person who clicked your ad? They bought something.” Your browser doesn’t even see this happening. |
| CPC bidding | Cost-Per-Click. Advertisers pay each time you click. Starting rate: $3-5 per click on your eyeballs. |
| CPM | Cost per thousand views. Currently $60 per 1,000 times an ad shows up below your conversation. |
| Attribution loop | The full circle: you see ad → you click → you visit site → you buy → the site tells OpenAI you bought. They close the loop so they know EXACTLY which conversation made you spend money. |
📡 How The Ad Injection Actually Works
Here’s the part that made my jaw drop.
While ChatGPT is generating your response, the backend is SIMULTANEOUSLY injecting structured ad objects into the conversation stream. Not after. Not separately. During the response generation.
The ads show up below your conversation — not inside the actual text (yet). But make no mistake: the system is analyzing what you’re talking about in real-time to decide which ad to serve.
- Free and Go tier users see ads (US, Canada, Australia, New Zealand)
- Plus, Pro, and Business subscribers are excluded
- Each ad has: advertiser name, favicon, headline (~16 chars), description (~32 chars), image, and landing URL
So basically: pay $20/month or become the product. Classic.
🕵️ The 4-Token Tracking System
This is where it gets diabolical. Every single ad click generates four Fernet-encrypted tokens. Not one. Four.
On the merchant side, a tracking SDK called OAIQ runs in your browser the moment you land on the advertiser’s website. It reports back to OpenAI:
- What products you viewed
- How long you stayed
- Whether you bought anything
Then there’s the Conversions API — launched the same day — which lets advertisers send server-side signals BACK to OpenAI from their own infrastructure. Translation: even if you block cookies, clear your browser, use incognito mode — the advertiser’s server is still snitching on you directly to OpenAI.
A community-maintained Google Tag Manager template for the OpenAI Ads Measurement Pixel dropped on May 7th. Two days after launch. They’re moving fast.
📊 The Receipts
| Metric | Number |
|---|---|
| Annualized ad revenue | $100 million (hit in just 6 weeks) |
| Advertisers in pilot | 600+ |
| CPC starting bid | $3–$5 per click |
| CPM rate | $60 per 1,000 impressions |
| Minimum ad spend (lowered from $250K) | $50,000 |
| Agency partners | Dentsu, Omnicom, Publicis, WPP |
| Tech partners | Adobe, Criteo, Kargo, Pacvue, StackAdapt |
| Countries with ads | US, Canada, Australia, New Zealand |
For context: Google made $307 billion in ad revenue last year. OpenAI hitting $100M annualized in 6 weeks with a beta product means they’re on a trajectory to eat into that pie FAST.
🗣️ What The Timeline's Saying
The reaction has been… mixed. And by mixed I mean a lot of people are pissed.
- Privacy researchers flagged the 4-token system as “more aggressive than standard display ad tracking”
- The Conversions API effectively makes browser-based ad blockers useless for this specific tracking chain
- Some developers pointed out that OAIQ running in-browser means OpenAI now has cross-site tracking data on millions of users — not just ChatGPT usage
- Advertisers, meanwhile, are thrilled — CPC of $3-5 is cheaper than Google Ads for most competitive keywords
- The “relevance-weighted, second-price auction” model means popular queries could spike to $20+ CPC fast
But here’s the kicker nobody’s talking about: OpenAI knows what you’re THINKING about. Not what you searched. What you asked. That’s a level of intent data Google would kill for.
🔮 What's Coming Next
OpenAI has already announced what’s in the pipeline, and it’s wild:
- CRM integration with Salesforce, HubSpot, and Microsoft Dynamics — meaning your ChatGPT ad clicks will be tied to your actual customer profile at companies
- Custom audiences — advertisers can upload customer lists and target lookalikes inside ChatGPT
- Multi-touch attribution — they’ll track not just one conversation, but your entire ChatGPT conversation history to see which chat eventually led to a purchase
This isn’t a search engine with ads. This is a mind-reading machine with ads. And the full 2026 roadmap suggests we’re only seeing phase one.
Cool. So Your AI Therapist Is Also Your Ad Salesperson Now. What the Hell Do We Do? ( ͡° ͜ʖ ͡°)
🕳️ The OAIQ Fingerprint Broker
OpenAI’s OAIQ SDK is brand new. Most website owners are installing it wrong, leaving tracking data exposed or misconfigured. If you understand web tracking pixels (or learn fast), you can audit businesses’ OAIQ implementations and charge them to fix it — because broken tracking = wasted ad budget, and they’re paying $3-5 PER CLICK for nothing.
Example: A 24-year-old web dev in Bogotá scraped the list of early ChatGPT ad partners, cold-emailed their marketing teams offering “OAIQ audit + optimization,” and landed 3 clients at $800/each within 10 days. She used nothing but browser DevTools and OpenAI’s own Ads documentation.
Timeline: First client in 5-7 days of cold outreach. This window stays open maybe 3-4 months before agencies bundle OAIQ setup into their standard packages and kill the freelance margin.
🎣 The Intent Gap Arbitrage
ChatGPT knows what people are ASKING — not just searching. That means someone asking ChatGPT “what’s the best budget camera for YouTube” has way higher buying intent than someone Googling the same phrase. CPC on ChatGPT is $3-5 right now. Google Ads for “best camera for YouTube” is $8-12. Buy the ChatGPT traffic, redirect to affiliate landing pages, pocket the CPA difference. The arbitrage window exists because most affiliate marketers haven’t figured out ChatGPT Ads Manager yet.
Example: An affiliate marketer in Tbilisi, Georgia spent $200 testing ChatGPT ads for VPN affiliate offers. Because users were literally mid-conversation about privacy concerns, the conversion rate was 3x what he got from Google Display. Cleared $1,400 profit in 2 weeks on a $200 spend.
📡 The Conversions API Middleman
OpenAI’s Conversions API requires server-side implementation — most small businesses can’t do this themselves. But the Google Tag Manager community template just dropped. Learn it before everyone else. Position yourself as “the person who connects ChatGPT ad data to your Shopify/WooCommerce.” You’re literally just installing a template and configuring API keys, but businesses will pay $500-2,000 for this because they don’t know it’s a template.
Example: A freelancer in Manila saw the GTM template launch on May 7th, recorded a 12-minute Loom walkthrough, posted it in 3 Shopify Facebook groups, and booked 6 implementation gigs at $600 each by end of week. Total setup time per client: 45 minutes.
🪟 The Ad-Free Tier Reseller
ChatGPT Plus ($20/month) = no ads. ChatGPT Free = tracked and served ads. Some businesses give employees free ChatGPT accounts for work. Those employees are now seeing ads mid-workflow, and their prompts (which might contain sensitive business info) are being used for ad targeting. Sell small businesses a “ChatGPT security audit” that basically says “upgrade your team to Plus or your competitors will see what you’re asking AI about” — because that’s literally what’s happening with ad targeting based on conversation context.
Example: An IT consultant in São Paulo emailed 50 local law firms explaining that their paralegals using free ChatGPT were exposing case details to the ad-targeting engine. 8 firms responded. 4 hired him to set up managed Plus accounts and basic prompt hygiene policies. Average contract: $1,200.
🎰 The Negative-Keyword Bounty Hunter
ChatGPT’s ad platform is NEW, which means the keyword exclusion (negative keyword) lists are garbage compared to Google’s mature system. Advertisers are burning money showing ads in conversations that are completely irrelevant. Run test conversations on Free tier, screenshot the mismatched ads, and sell “negative keyword audit reports” to the advertisers. You’re finding their wasted spend. They’ll pay to stop the bleeding.
Example: A marketing student in Cairo spent a weekend chatting with free ChatGPT about random topics — medical symptoms, legal questions, DIY repairs — and screenshotted every ad that appeared. She compiled 40+ brands with obviously mismatched placements, emailed their marketing departments with proof, and 5 responded wanting full audits. She charged $400 per report. Total investment: her time and a free ChatGPT account.
🛠️ Follow-Up Actions
| Step | Action |
|---|---|
| 1 | Create a free ChatGPT account and document every ad you see for a week — note what you were talking about when each ad appeared |
| 2 | Read OpenAI’s full Ads Manager docs — understand the platform from the advertiser side |
| 3 | Learn the GTM community template for OAIQ pixel — takes 2 hours max |
| 4 | Pick ONE hustle above and do cold outreach to 20 targets this week |
| 5 | If you’re a user who just wants to BLOCK this stuff: upgrade to Plus, use a browser with strict JS blocking, or switch to Claude/local models for sensitive conversations |
Quick Hits
| Want to… | Do this |
|---|---|
 Stop ChatGPT tracking you |
Upgrade to Plus tier or use alternative AI tools for sensitive prompts |
 Make money from this immediately |
Learn the OAIQ SDK audit flow — businesses are spending $50K+ on ads with broken tracking |
| See what data OpenAI collects |
Open DevTools on any site running OAIQ, check network tab for oaiq calls — you’ll see the 4 Fernet tokens in real time |
 Understand the ad auction |
Read this CPC breakdown — second-price auction means you often pay less than your bid |
| Go deeper on the attribution loop |
The full technical breakdown explains every token and API call |
Your AI assistant now has a side hustle selling your attention. The least you can do is have a side hustle selling theirs.
!