That would work. If it's done similar to ActivationProfile, the user's email and saved search id could be left out of the url.