How Email Tracking Works and How to Stop It

When you open a marketing email, the sender usually knows. Not just that you opened it — but when you opened it, where you were, what device you used, and sometimes how many times you read it. This isn’t a hack or an exploit. It’s standard practice, used by virtually every company that sends email at scale. According to research cited by the BBC, up to 60% of emails contain tracking pixels, and the actual number is likely much higher — most email marketing platforms enable tracking by default.

The technology behind this is simple, invisible, and almost impossible to detect with the naked eye. This guide explains exactly how email tracking works — from pixel tracking to link redirection — why it matters for your privacy, and the most effective ways to block it without breaking your email experience.

Table of Contents

1. How Tracking Pixels Work
2. Link Tracking: The Other Half of Email Surveillance
3. Read Receipts and Other Tracking Methods
4. Who Uses Email Tracking (And Why)
5. Exactly What Data Is Collected
6. Why You Should Care
7. How to Block Email Tracking
8. How to Tell If an Email Is Tracking You
9. Key Takeaways
10. FAQs

How Tracking Pixels Work

The most common email tracking method is the tracking pixel — also called a web beacon, spy pixel, or 1×1 pixel. It’s a tiny, invisible image embedded in the email’s HTML code. Here’s how it works, step by step:

1. The sender embeds an image in the email. This image is typically a 1×1 pixel transparent GIF or PNG — literally invisible. It’s the same color as the background, or so small that it’s invisible to the human eye.
2. The image is hosted on the sender’s server (or their email marketing platform’s server). It’s not embedded in the email itself — it’s loaded from a remote URL when you open the email.
3. When you open the email, your email client loads the image. This triggers an HTTP request to the server hosting the pixel.
4. The server logs the request. That single request reveals:
   • That you opened the email
   • The exact date and time
   • Your IP address (which reveals your approximate geographic location)
   • Your device type and operating system
   • Your email client (Gmail, Outlook, Apple Mail, etc.)
5. Each pixel URL is unique per recipient. The URL typically contains an identifier tied to your specific email address, so the sender knows exactly who opened the email.

The entire process happens invisibly in the background. You see a normal-looking email. The sender sees a data point: “John Doe opened the email at 2:34 PM ET from an iPhone in New York.”

Why it’s so effective

Tracking pixels work because they exploit a standard feature of email: loading remote images. Unless you specifically disable image loading (which breaks the visual formatting of most emails), every email you open that contains a tracking pixel reports back to the sender.

Link Tracking: The Other Half of Email Surveillance

Beyond open tracking, most marketing emails also use tracked links. Instead of linking directly to their website, they route every click through a tracking server.

Here’s what happens:

• The email displays a link that looks like example.com/sale.
• But the actual href points to something like track.emailservice.com/click/abc123xyz.
• When you click, the tracking server logs the click (who, when, what link), then redirects you to the actual destination.

This tells the sender:

• Which links you clicked
• How many times you clicked them
• When you clicked them
• Your IP address and device (again)

You can spot tracked links by hovering over them before clicking. If the URL in the status bar doesn’t match the displayed text — especially if it contains “track,” “click,” “redirect,” or a long alphanumeric string — it’s a tracked link.

Read Receipts and Other Tracking Methods

MDN (Message Disposition Notification) read receipts

Some email senders request read receipts — a formal notification sent back when you open the message. Most modern email clients let you decline these, and many prompt you before sending. But older or misconfigured clients may send them automatically.

Embedded web content

Some emails include embedded web frames or dynamic content that makes additional server requests as you interact with the email. These can track scrolling, time spent reading, and which sections you viewed.

Font tracking

A less common but emerging technique: emails that load custom fonts from remote servers. Like pixel tracking, the font request reveals your IP, device, and the fact that you opened the email.

Create alias in seconds

Start protecting your inbox now — it’s free!

Create my first alias

Who Uses Email Tracking (And Why)

Email tracking isn’t limited to shady marketers. It’s used across virtually every industry:

• Marketing teams — to measure campaign performance (open rates, click rates), segment audiences by engagement, and trigger automated follow-ups based on your behavior.
• Sales teams — to know when a prospect opens their email, so they can call at the “perfect moment.” Tools like HubSpot, Salesforce, and Yesware make this effortless.
• Recruiters — to track whether candidates read their outreach messages and which ones engaged with the job description link.
• Newsletters — to measure engagement for their own analytics and to report metrics to advertisers and sponsors.
• E-commerce — to track which promotional emails drive purchases and to build behavioral profiles for personalized recommendations. See our guide on email aliases for online shopping for more on this.

Email marketing platforms — Mailchimp, SendGrid, HubSpot, Klaviyo, Campaign Monitor — include tracking by default. Most senders don’t even make a conscious decision to track you; it’s simply the default behavior of the tools they use.

Exactly What Data Is Collected

Here’s the complete picture of what a single tracked email can reveal about you:

Over time, this data accumulates into a detailed behavioral profile: your schedule, your interests, your location patterns, and your level of engagement with different types of content.

Why You Should Care

Email tracking might seem harmless — “so they know I opened an email, so what?” — but the implications are bigger than they appear:

Privacy erosion

Your location, device, reading habits, and daily schedule are being collected without your explicit consent. In most cases, there’s no disclosure that tracking is happening. You never opted into surveillance — you just opened an email.

Behavioral profiling and manipulation

Open rates and click patterns feed into profiles used for ad targeting, content personalization, and pricing decisions. Sales teams literally time their follow-up calls based on when you open their email. You’re being surveilled so you can be sold to more effectively.

Data accumulation risks

Tracking data is stored, aggregated, and sometimes shared with third parties or exposed in data breaches. The profile built from your email behavior can be combined with other data sources to create detailed dossiers.

Unequal information

Email tracking creates an asymmetric relationship. The sender knows exactly when you read their email, how many times, and from where. You have no idea you’re being watched. This information imbalance is exploited in negotiations, sales interactions, and professional relationships.

How to Block Email Tracking

The good news: tracking is relatively easy to block once you know how. Here are the most effective methods, ranked by effectiveness and convenience:

1. Use an email alias with built-in tracking protection (best option)

Alias Email’s tracking protection strips tracking pixels from forwarded emails before they reach your inbox. This means you can keep images enabled (so emails look normal) while still blocking tracking. It’s the best of both worlds — no broken email layouts, no surveillance.

The service identifies known tracking pixel patterns and removes them while preserving legitimate images like product photos, logos, and diagrams.

2. Disable automatic image loading

Since tracking pixels rely on image loading, disabling auto-load blocks them completely:

• Gmail (web): Settings → General → Images → “Ask before displaying external images.”
• Gmail (mobile): Settings → your account → Images → “Ask before displaying external images.”
• Outlook (web): Settings → View all Outlook settings → General → Privacy → uncheck “Automatically load external images.”
• Outlook (desktop): File → Options → Trust Center → Trust Center Settings → Automatic Download → check “Don’t download pictures automatically.”
• Apple Mail (macOS): Mail → Settings → Privacy → check “Protect Mail Activity.” This is Apple’s built-in tracking protection that proxies images through Apple’s servers.
• Apple Mail (iOS): Settings → Mail → Privacy Protection → turn on “Protect Mail Activity.”

Trade-off: disabling images means emails will look plain until you manually choose to load images for specific messages. This is effective but inconvenient for visually-rich emails.

3. Use Apple Mail’s Privacy Protection

Apple Mail (on macOS and iOS) offers “Protect Mail Activity,” which downloads all remote content (including tracking pixels) through Apple’s proxy servers. This means the tracking pixel fires, but the sender sees Apple’s IP address and server information instead of yours. They know the email was “opened” but can’t determine your real location or device.

This is a good middle ground if you’re in the Apple ecosystem — images load normally, but tracking data is obscured.

4. Use a VPN

A VPN hides your real IP address, so even if tracking pixels fire, the sender sees your VPN server’s location instead of yours. This doesn’t prevent open tracking (they still know you opened the email) but it does hide your physical location.

How to Tell If an Email Is Tracking You

Want to check a specific email? Most email clients let you view the message source (raw HTML). Here’s what to look for:

• 1×1 pixel images — search for width="1" height="1" or images with dimensions of 1 pixel.
• Tracking domain URLs — look for image sources containing words like “track,” “pixel,” “beacon,” “open,” “wf,” or “t.gif” in the URL.
• Unique identifiers in image URLs — long strings of alphanumeric characters in image URLs typically identify your specific email address.
• Redirect links — hover over links to check if they point to a different domain than displayed, especially domains with “click,” “track,” or “redirect” in the name.

In Gmail, you can view the message source by clicking the three dots → “Show original.” In Outlook, open the message → File → Properties → “Internet Headers.”

Key Takeaways

• Email tracking is standard practice: over 50% of marketing emails include tracking pixels, and email platforms enable tracking by default.
• Tracking pixels are invisible 1×1 images that report when you open an email, your location, device, and email client — all without your knowledge.
• Link tracking redirects every click through a logging server, recording which links you click and when.
• This data accumulates into behavioral profiles used for ad targeting, sales timing, pricing decisions, and cross-platform profiling.
• The most effective protection is an email alias with built-in tracking protection, which strips pixels before emails reach your inbox.
• Disabling image auto-loading blocks tracking completely but makes emails look plain. Apple Mail’s Privacy Protection is a good middle ground for Apple users.
• You can detect tracking by viewing the email source and looking for 1×1 pixel images and redirect links.

FAQs

Email tracking is invisible, pervasive, and largely unregulated. Every time you open a marketing email, you may be reporting your location, schedule, and behavior back to the sender — without ever knowing it. You don’t have to accept this as normal. Use Alias Email’s built-in tracking protection to strip surveillance from your emails, or take manual steps to disable image loading and inspect tracked links. Your inbox should be a communication tool, not a surveillance vector.