How Email Tracking Pixels Work and How to Block Them

You open an email from a newsletter, a store, or even someone you know. Nothing looks unusual. But the moment your email client renders the message, a 1x1 pixel image loads from a remote server — and the sender now knows you opened it, when you opened it, what device you used, and roughly where you are.

This is a tracking pixel. It is the most common form of email surveillance, and most people have no idea it is happening.

What is a tracking pixel?

A tracking pixel (also called a web beacon, spy pixel, or open tracker) is a tiny, invisible image embedded in the HTML of an email. It is typically a 1x1 pixel transparent GIF or PNG hosted on the sender’s server. The image tag looks something like this:

<img src="https://track.example.com/open/abc123" width="1" height="1" style="display:none">

The URL contains a unique identifier (abc123) tied to your email address. When your email client loads the image, it makes an HTTP request to the tracking server. That request reveals:

• That you opened the email — the image was requested, so the message was rendered
• When you opened it — the server logs the exact timestamp
• Your IP address — which reveals your approximate geographic location
• Your device and email client — from the HTTP User-Agent header
• How many times you opened it — each open triggers a new request (unless cached)

Who uses tracking pixels?

Almost every sender of bulk email uses tracking pixels. The technology is built into every major email marketing platform:

Category	Examples	Purpose
Email marketing platforms	Mailchimp, SendGrid, HubSpot, Constant Contact	Open rate analytics, campaign performance
Sales tools	HubSpot Sales, Yesware, Mixmax, Superhuman	Know when a prospect reads your email
Newsletters	Substack, Beehiiv, ConvertKit	Subscriber engagement metrics
Transactional email	Order confirmations, shipping notifications	Delivery confirmation, engagement tracking
Phishing campaigns	Targeted attacks	Verify that a victim’s email address is active and monitored

The last category is the most concerning. Attackers use tracking pixels in reconnaissance emails to confirm that an address is valid and actively checked before launching a targeted spear phishing attack.

What tracking pixels reveal about you

A single tracked open gives the sender a surprising amount of information:

Location

Your IP address maps to a geographic location — typically accurate to the city level, sometimes to the neighborhood. If you open the same email from your office and then from home, the sender knows both locations and can infer your commute pattern.

Device and software

The HTTP request includes a User-Agent string that identifies your operating system, browser or email client, and device type. The sender can tell whether you read their email on an iPhone, a Windows desktop running Outlook, or a Chromebook using the Gmail web client.

Behavior patterns

If you open the same email three times over two days, the sender knows you are interested. Sales teams use this signal aggressively — some tools send real-time notifications the moment a prospect reopens a proposal email, so the salesperson can call while the prospect is actively thinking about it.

Email forwarding detection

If you forward a tracked email and the recipient opens it, the sender sees a new open from a different IP and device. They now know the email was forwarded, even if they do not know to whom.

How to detect tracking pixels

Most tracking pixels are invisible by design, but you can find them:

• View the email source. In Gmail, click the three dots and select “Show original.” Search for <img tags with width="1" or height="1", or images hosted on known tracking domains.
• Look for known tracking domains. URLs containing paths like /track/, /open/, /pixel/, or /beacon/ are almost always tracking pixels.
• Check for invisible images. Images with display:none or visibility:hidden styles exist only for tracking — they contribute nothing to the visual layout.

How to block tracking pixels

1. Disable remote image loading

The most effective method. If your email client does not load remote images, tracking pixels never fire.

Email client	Setting
Gmail (web)	Settings → General → Images → “Ask before displaying external images”
Outlook (desktop)	File → Options → Trust Center → Automatic Download → uncheck all
Apple Mail (macOS)	Settings → Privacy → enable “Protect Mail Activity” (see below)
Apple Mail (iOS)	Settings → Mail → Privacy Protection → enable “Protect Mail Activity”
Thunderbird	Settings → Privacy & Security → uncheck “Allow remote content in messages”

The downside: disabling images breaks the visual layout of most marketing emails. Images, logos, and formatted content will show as empty boxes until you manually choose to load them.

2. Apple Mail Privacy Protection

Apple introduced Mail Privacy Protection in iOS 15 and macOS Monterey. Instead of blocking images entirely, it takes a smarter approach:

• All remote content is pre-fetched through Apple’s proxy servers — the sender sees Apple’s IP address, not yours
• Content is fetched in the background regardless of whether you actually open the email — so the sender cannot tell if you read it
• Your real IP, location, and open time are hidden from the tracking server

This is the best of both worlds: images still display correctly, but tracking pixels become useless. The limitation is that it only works in Apple Mail — if you use the Gmail app on your iPhone, Apple Mail Privacy Protection does not apply. For more on iCloud’s privacy features, see Is iCloud Mail Safe?

3. Use a privacy-focused email client

Some email clients are built specifically to defeat tracking:

• Thunderbird blocks remote content by default and shows a clear prompt when an email wants to load external images
• Tutanota and ProtonMail strip tracking pixels and proxy remote images through their own servers

4. Use email aliases

Tracking pixels tie to your email address through the unique identifier in the URL. If you use a different email alias for each service, you limit how much any single tracker can learn about you. A marketing company that tracks opens on your shopping alias learns nothing about your banking or social media email activity, because those use different addresses.

Are tracking pixels legal?

The legal landscape is complicated and varies by jurisdiction:

• GDPR (Europe): Tracking pixels are considered personal data processing. Strictly speaking, the sender needs consent or a legitimate interest basis. In practice, most senders bury it in their privacy policy. Enforcement has been limited but is increasing.
• CAN-SPAM (US): Does not specifically address tracking pixels. The law focuses on opt-out mechanisms and truthful headers, not on tracking opens.
• CCPA (California): Tracking pixels may constitute “sale” of personal information if the collected data is shared with third parties.
• ePrivacy Directive (EU): Requires consent for storing or accessing information on a user’s device. Tracking pixels arguably fall under this, though enforcement is inconsistent.

The practical reality is that tracking pixels are ubiquitous and rarely challenged individually. Regulation is slowly catching up, but protection currently depends more on technical measures than legal ones.

Beyond tracking pixels

Tracking pixels are the most common form of email tracking, but not the only one:

• Link tracking: Every link in the email is replaced with a redirect through the sender’s tracking server. Even if you block images, clicking a link still reveals your interest and identity. For more on what email metadata reveals, see What Your Email Metadata Reveals About You.
• Read receipts (MDN): Some email clients support read receipts that explicitly notify the sender when you open a message. Most clients ask for your permission before sending one.
• Custom fonts: Rare but possible — embedding a custom font hosted on a remote server achieves the same tracking effect as a pixel, since loading the font triggers an HTTP request.

How Cleanbox helps

Cleanbox sits between the sender and your inbox, processing every email before delivery. While tracking pixels are embedded in the email content (which Cleanbox delivers intact to your mailbox), using Cleanbox aliases means your real email address is never exposed to the tracking system in the first place. If a service leaks or sells data tied to your alias, you can disable that alias and cut off the tracking chain entirely.

For the strongest protection, combine Cleanbox aliases with Apple Mail Privacy Protection or disabled remote image loading in your email client. The alias prevents identity correlation across services, and the image blocking prevents open tracking within each service.