Do you know if the rewrite happens before a user clicks a link? If it happens after, the data ends up actually being sent out to their server...