Email Tracking Pixels: How Senders Know You Opened Their Email and How to Stop It

Email tracking is the practice of embedding invisible images, called tracking pixels, and uniquely coded links in emails so the sender can tell when you opened a message, how many times, on what kind of device, roughly where, and which links you clicked. You can stop most of it by disabling automatic loading of remote images, using privacy features such as Apple Mail Privacy Protection, avoiding tracked links, and giving disposable addresses to senders you do not trust.

This guide explains exactly how tracking pixels and link tracking work, what information they leak, how the major email apps treat them, how to detect tracking in a message you received, and the specific settings and habits that block it on desktop, webmail and mobile.

Key takeaways

• A tracking pixel is an image request, not magic. If your email app does not load remote images, the pixel does nothing.
• Each pixel URL is usually unique to you, so a single image request identifies the recipient, the campaign and the time of the open.
• Tracked links work even when images are blocked. Clicking reveals you through a redirect with a unique ID.
• Gmail's image proxy hides your IP but not the fact that you opened the email unless you switch to asking before displaying images.
• Apple Mail Privacy Protection preloads images through relays, which hides your IP and makes "opened" signals unreliable for senders.
• Open tracking also confirms your address is active, which is valuable to spammers.
• A temporary inbox from VookMail keeps tracking from low-trust senders separate from your real identity.

What is an email tracking pixel?

An email tracking pixel is a tiny image, often 1 by 1 pixel and transparent, inserted into the HTML of an email. It is not attached to the message. Instead, the email contains an instruction such as:

<img src="https://track.sender.example/o/8f3a91c2e7.gif" width="1" height="1" alt="">

When your email app renders the message and loads that image from the internet, it sends an HTTP request to the sender's tracking server. The string in the URL (here 8f3a91c2e7) is typically unique to you and to that specific email. The server records the request and returns a blank image, which you never notice.

From the sender's perspective, "the image was requested" is interpreted as "the email was opened". This is the basis of the "open rate" reported by virtually every email marketing platform and many sales and CRM tools.

Pixels do not have to be pixels

The same technique works with any remote resource the email app loads: a visible logo, a banner, a background image in CSS, or a web font. A sender can give each recipient a unique URL for the header logo and get the same open data. So "block tracking pixels" really means "control loading of remote content".

What does a tracking pixel reveal?

When an email app fetches a remote image directly, the request carries information the server can log.

None of this requires cookies, scripts or any action from you beyond opening the message. Email apps do not run JavaScript in messages, so pixels are the main tracking tool available inside the email body.

What a tracking pixel cannot reveal

• It cannot read your other emails, files or contacts.
• It cannot install software on its own.
• It cannot pinpoint your street address; IP geolocation is approximate and often wrong at the city level, and mobile or corporate networks can place you far from your real location.
• It cannot tell whether you actually read the content, only that the image loaded.

How does link tracking work?

Link tracking is the second half of email tracking, and it works even when images are blocked. Instead of linking directly to the destination, the email links to the sender's tracking domain with a unique code:

https://click.sender.example/c/8f3a91c2e7/42

When you click, the tracking server logs your identity (from the code), the specific link (here number 42), time, IP and browser, then sends an HTTP redirect to the real page. The detour usually takes a fraction of a second and is invisible unless you look at the URL.

The destination page may also carry tracking parameters such as utm_source, utm_medium and utm_campaign, which feed web analytics and can connect your email identity to your browsing on the sender's site, especially if you later log in or fill a form.

Clicks are stronger evidence than opens

Because opens are now distorted by privacy features (explained below), many senders weight clicks more heavily. A click is a deliberate action and passes through your actual browser, revealing your real IP address unless you use a VPN or similar tool.

Tracking pixels versus read receipts

People often confuse the two. They work very differently.

Some business messaging systems have their own internal read status that works differently again, but for ordinary email across providers, the pixel is the silent method and the read receipt is the polite one.

Who uses email tracking, and why?

• Newsletters and retailers measure open rates, test subject lines, and remove inactive subscribers.
• Sales teams use tracking add-ons that alert them the moment a prospect opens an email, so they can follow up.
• Transactional senders sometimes track opens of receipts and notifications for diagnostics.
• Recruiters, freelancers and individuals may use browser extensions that add pixels to their personal emails.
• Spammers and phishers use pixels to verify which addresses are live, so they can send more or sell the list as "verified".

Most of these uses are routine commercial analytics. The privacy problem is that it happens silently, it profiles behavior over time, and the same technique serves malicious senders.

How do major email apps handle tracking pixels?

Behavior differs a lot between apps, and defaults matter because most people never change them.

Gmail

Gmail serves images in messages through its own image proxy. When a message is opened, Google's servers fetch the image and pass it to you, so the sender sees a Google server's IP address and a generic user agent instead of your own. Images are also cached, which can make repeated opens less visible. However, with the default setting images load automatically, so the first fetch still tells the sender that the message was opened and approximately when.

To stop that, open Gmail settings, find the Images option, and choose Ask before displaying external images. Gmail then shows images only when you click to display them, for that message or that sender.

Apple Mail and Mail Privacy Protection

Apple introduced Mail Privacy Protection in 2021 for Mail on iPhone, iPad and Mac. When enabled, Mail downloads remote content in the background through multiple proxy relays, generally regardless of whether you open the message. The sender sees relay IP addresses, cannot reliably tell whether or when you actually opened the email, and cannot use your IP address to estimate your location. Many senders now report inflated open rates because of these automatic fetches.

You are usually offered the option on first launch of Mail. You can check it in the Mail settings under Privacy Protection. If you choose not to use it, the alternative setting is to block all remote content, which works like Gmail's "ask before displaying".

Note that Mail Privacy Protection applies to the Apple Mail app, regardless of which email account you use in it, but not to other apps or to webmail opened in a browser.

Outlook

Outlook's desktop apps have long blocked automatic download of external pictures by default for messages from senders not on your safe list, showing a bar you can click to download them. Outlook on the web and mobile have their own settings for external images and may route images through a proxy. Check the privacy or mail layout settings for options about external images and confirm which behavior is active for your account, since defaults have changed across versions.

Thunderbird

Mozilla Thunderbird blocks remote content by default and shows a notice that lets you allow it for a specific message or sender. This is one of the most tracking-resistant defaults among popular apps.

Other mobile apps

Many third-party mail apps on Android and iOS include a "load remote images" or "block external content" toggle. Look in the app's privacy or display settings; the wording varies, but the effect is the same.

How to stop email tracking: step by step

No single setting stops everything. Combine the steps below for strong protection with little inconvenience.

Step 1: Disable automatic loading of remote images

1. Open your email app's settings.
2. Look for options named "Images", "External images", "Remote content", "Load remote images" or "Privacy".
3. Choose the option to ask before displaying, or to block remote content.
4. Save. From now on, pixels do not load unless you allow images for a message.

This single step defeats the core of open tracking in most apps. Emails from brands may look sparse until you load images, but text, links and attachments still work.

Step 2: Turn on built-in privacy protection where available

If you use Apple Mail, enable Mail Privacy Protection. If your provider offers an image proxy or tracker blocking option, turn it on. Some privacy-focused email providers strip or block known trackers automatically and label messages that contained them.

Step 3: Load images selectively

When you choose to display images for a specific message, you accept tracking for that message. Do it for senders you trust and where images matter, such as a receipt showing a product photo, and leave it off for unknown or promotional senders.

Step 4: Be deliberate about clicking

• Hover over links to see whether they go through a tracking domain.
• If you want a page but not the click record, navigate to the site directly or search for it instead of clicking.
• Be cautious with unsubscribe links in emails you suspect are spam: clicking confirms your address. For senders you actually subscribed to, use the unsubscribe link or your app's built-in unsubscribe button, which uses the standard List-Unsubscribe header.

Step 5: Read suspicious mail in plain text

Many desktop apps can display messages as plain text. Plain-text view ignores HTML and remote content entirely, so nothing is loaded. It is the strongest option for messages you are investigating, such as possible phishing.

Step 6: Consider tracker-blocking extensions for webmail

Browser extensions exist that detect known tracking pixels in webmail and block them or flag them with an icon. Choose carefully: an extension that reads your webmail has access to your messages, so prefer well-reviewed, open-source or reputable options, and grant only the permissions needed.

Step 7: Use a VPN or network-level privacy tool if your IP matters

If you load images or click links, your IP address is visible to the server unless a proxy sits between you. Email-level proxies like Gmail's cover image loads, but not clicks in your browser. A reputable VPN hides your home IP for both.

Step 8: Do not give your real address to senders you do not trust

The most complete protection is not receiving tracked email at your real address in the first place. For one-off sign-ups, downloads and newsletters you only want to read once, use a temporary inbox.

How disposable email limits tracking

Tracking is valuable to senders because it attaches behavior to an identity: your email address, linked to your name, purchases and other data. A disposable address breaks that link.

With VookMail, an address is created as soon as the page loads, with no sign-up and no password. You can type your own username and choose from about 31 domains, or press the yellow shuffle button for a random address. Messages arrive in real time, attachments are supported, and messages and attachments are deleted automatically after about a day.

If a newsletter or download page sends a tracked email to that address, the sender learns only that a throwaway address opened a message. They cannot tie it to your main inbox, they cannot use it to build a long-term profile of your reading habits, and they cannot verify your real address for future mailings. When the inbox content expires, any further tracked mail goes nowhere useful.

Be precise about what this does and does not cover. If images load when you view a message, the sender's server may still see the IP address of the device you are using, so pair a temporary address with a VPN if hiding your network location matters to you. And as always, disposable email is for one-off and low-importance use: never use it for banking, government, healthcare, work or primary social accounts, or for anything that breaks another site's terms. The privacy policy describes how VookMail handles message data.

How to tell if an email you received is tracked

You do not need special tools to check. Try these methods.

1. Look at the blocked-images notice. If your app blocks remote content and shows a banner for a message that appears to be plain text, that message contains remote resources, quite possibly a pixel.
2. View the source. Use "Show original" or "View source" and search for <img. Look for images with width="1" and height="1", styles like display:none, or image URLs with long random strings.
3. Check link destinations. Hover over links. If they all go to a domain like click., links., t. or email. followed by a different domain, and contain long codes, they are tracked.
4. Look at the headers. Messages sent through marketing platforms often include headers naming the platform or a List-Unsubscribe header pointing to its servers. This does not prove tracking but makes it likely.
5. Use a tracker-detecting extension or provider feature that labels known trackers.

Here is what a typical tracked marketing email looks like in source, simplified:

<a href="https://click.esp.example/ls/click?upn=Xy7Q...">Shop the sale</a>
<img src="https://open.esp.example/wf/open?upn=Xy7Q..." width="1" height="1" style="border:0;">

The same upn code appearing in both the link and the image identifies you as the same recipient across opens and clicks.

A worked example: one newsletter, four readers

Imagine a retailer sends the same tracked newsletter to four people. Each uses a different setup. Here is what the retailer's tracking dashboard learns about each.

Reader A: a desktop app that loads images automatically

Reader A opens the email at 08:14 on a home connection. The app fetches the pixel directly. The retailer logs an open at 08:14, Reader A's home IP address (suggesting their city and internet provider), and a user agent naming the app and operating system. Reader A opens it again at 19:40 from a phone on mobile data, so the retailer now also knows Reader A reads mail on two devices and roughly where they are in the evening. When Reader A clicks a product link, the click is tied to the same recipient code.

Reader B: Gmail with default settings

Reader B opens the email at 09:02. Gmail's proxy fetches the pixel, so the retailer logs an open at about 09:02 but sees a Google server IP and generic client information. A later re-open may not register because the image is cached. If Reader B clicks a link, the click passes through their own browser and reveals their real IP to the click-tracking server.

Reader C: Apple Mail with Mail Privacy Protection

Apple's relays fetch the newsletter's images shortly after delivery, possibly while Reader C is asleep and before they ever look at it. The retailer logs an "open" at a time unrelated to Reader C's reading, from a relay IP. It cannot tell whether Reader C read the email at all. Only a click would provide a real signal.

Reader D: images blocked, reading in a temporary inbox

Reader D signed up with a disposable address to read a single buying guide, and their mail app blocks remote images. The retailer logs no open. If Reader D reads the text and never clicks a link, the retailer learns nothing beyond the fact that the address existed. A day later the message is deleted and further newsletters reach an address nobody reads.

The lesson: each layer removes something. Proxies remove your IP, privacy preloading removes timing, image blocking removes the open, avoiding tracked links removes clicks, and a disposable address removes the link to your identity.

Tracking in less obvious places

Personal emails from individuals

Tracking is not limited to newsletters. Sales staff, recruiters and some individuals use mail add-ons that insert a pixel into ordinary-looking one-to-one emails. Image blocking catches these too, which is a good reason to keep it on even for messages that look personal.

Forwarded and replied messages

When you forward a tracked email, the pixel usually travels with it. If the recipient's app loads images, the sender may see an extra open from a new location and device, and conclude the message was shared. Some tracking tools explicitly report "possibly forwarded".

Preview panes and notifications

Selecting a message in a preview pane renders it, which can load remote images just like opening it fully. Notification previews on phones usually show only text and generally do not load images, but app behavior varies.

Email signatures

Logos and social icons in signatures are often remote images. In tracking tools, these can be given unique URLs per message, turning a harmless-looking signature into an open tracker.

Why open tracking is less accurate than senders think

Several factors make "opened" a fuzzy signal, which is useful to understand whether you are a reader or a sender.

• Privacy preloading like Apple Mail Privacy Protection fetches images whether or not a human opened the message, creating false opens.
• Image blocking hides real opens, creating false non-opens.
• Proxy caching can hide repeat opens.
• Security scanners in corporate environments may fetch images and follow links to check them for threats, producing opens and clicks no human made.
• Preview panes may load images when you merely select a message, so an "open" may last half a second.

For senders, this is why reputable email programs focus on clicks, replies and conversions rather than opens alone, and why they should not draw personal conclusions from a single open event.

Is email tracking legal?

The answer depends on where the sender and recipient are and what is done with the data. In general terms:

• European Union and UK: rules on storing or accessing information on users' devices (from the ePrivacy framework) and on personal data processing (GDPR and UK GDPR) apply. Data protection regulators have increasingly treated tracking pixels like other trackers, expecting clear information and, in many cases, prior consent, particularly for marketing analytics.
• United States: there is no single federal rule specifically banning email pixels. Commercial email is governed by the CAN-SPAM Act, which focuses on honest headers, identification and unsubscribing rather than tracking. Some state privacy laws give residents rights over personal data collected, which can include tracking data.
• Elsewhere: rules vary; many require disclosure in a privacy policy.

This is general information, not legal advice. As a recipient, your practical protection comes from your settings; as a sender, check the rules that apply to your audience and disclose tracking clearly.

Advice for senders: tracking responsibly

If you run a newsletter or send transactional email, you can measure effectively while respecting readers.

1. Disclose tracking in your privacy policy and, where required, at sign-up.
2. Obtain consent where the law requires it, and offer a way to opt out of tracking, not just out of email.
3. Do not track sensitive transactional messages such as password resets or security alerts unless there is a clear operational reason.
4. Prefer aggregate metrics over individual surveillance, and avoid sales alerts that react to every single open.
5. Design for blocked images: use real text, meaningful alt text and links that make sense without pictures.
6. Test your emails by sending them to a temporary inbox to see exactly what arrives: links, attachments, and how the message looks. A fresh VookMail address per test keeps your own inbox out of the loop.

Common mistakes people make with email tracking

• Assuming image blocking stops all tracking. Tracked links still work when clicked.
• Assuming Gmail's proxy hides opens. It hides your IP and device, not the fact that the image loaded.
• Clicking "unsubscribe" in obvious spam. It confirms your address. Report as spam instead.
• Loading images for every message out of habit, which undoes the protection.
• Installing an unknown tracker-blocking extension that gains access to your entire mailbox.
• Thinking tracking means hacking. A pixel cannot read your mail; it reports a fetch. Stay calm, change settings, and move on.
• Using your main address for every sign-up, letting dozens of senders build profiles on the same identifier.

Email tracking protection checklist

1. Set every email app you use to ask before loading remote images, or to block remote content.
2. Enable Mail Privacy Protection if you use Apple Mail.
3. Set your apps never to send read receipts automatically.
4. Hover before clicking; navigate directly when you do not want a click recorded.
5. Read suspicious messages in plain text or source view.
6. Use a VPN when you want to hide your IP from clicked links and loaded images.
7. Give one-off and low-trust senders a disposable address instead of your real one.
8. Unsubscribe properly from legitimate senders you no longer want, and report spam instead of unsubscribing from it.

Frequently asked questions

What is an email tracking pixel?

An email tracking pixel is a tiny, usually invisible image embedded in an email with a unique web address. When your email app loads it, the sender's server logs the request, which reveals that the email was opened, when, and typically your IP address and email client.

How do I stop email tracking pixels?

Turn off automatic loading of remote or external images in your email app, use privacy features such as Apple Mail Privacy Protection where available, read suspicious mail in plain text, avoid clicking tracked links when you can reach the same page directly, and give disposable addresses to senders you do not trust.

Does Gmail block tracking pixels?

Gmail routes images through its own proxy, which hides your IP address and device details from senders. However, by default images load automatically, so the sender still learns that and roughly when the email was opened. Choosing Ask before displaying external images in Gmail settings prevents that.

Do read receipts and tracking pixels work the same way?

No. A read receipt is a standard request in the email headers that your email app asks you to approve before sending a reply. A tracking pixel is silent and works through image loading, without asking you.

Can a tracking pixel give someone my exact location?

Not exactly. An IP address usually reveals an approximate location such as a city or region and your internet provider, not your street address. Proxies used by Gmail and Apple Mail Privacy Protection hide your real IP from the sender.

Is email tracking legal?

It depends on the jurisdiction and how the data is used. In the EU, rules on accessing information on users' devices and on personal data have led regulators to expect transparency and, in many cases, consent for tracking pixels. Elsewhere it is often permitted with disclosure in a privacy policy.

Will blocking images break emails?

Some marketing emails will look empty or broken until you load images, but text, links and attachments still work. You can load images for individual trusted messages or senders with one click.

Does a disposable inbox stop tracking?

It limits what tracking achieves. A pixel opened in a temporary inbox only tells the sender that a throwaway address read the message, which is not tied to your real identity or main inbox. If you want to hide your IP address too, combine it with image blocking or a network-level privacy tool.

Learn more about how VookMail works on the About us page, or read more privacy guides on the VookMail blog.