Open any newsletter and look closely. The visible part is the article. The invisible part is a quiet network of pixels, redirects, and identifiers that report back the moment you open it. Email tracking is one of the most widespread forms of surveillance most of us live with every day — and one of the easiest to opt out of once you see how it works. Running an email tool, I see this plumbing from both sides, so here is the honest version.
The tracking pixel
The simplest tracker is a tiny, transparent image (a “web beacon”), often one pixel square, hosted on the sender’s server. When your client downloads it to render the message, the server logs the request: the time, your IP, your rough location, your device and client, and a unique ID tying it to your account. From that one request the sender learns whether you opened the email, when, where, on what device, and sometimes how many times. In aggregate it feeds the segmentation that decides what you get sent next.
Link wrapping
Click any link in a marketing email and you usually pass through the sender’s domain first. Each link carries a unique ID, so the sender sees exactly which links you click, in which messages, in what order. Combined with open data from the pixel, that builds a behavioural profile per subscriber. Link wrapping has legitimate uses too — malware filtering, broken-link reports — but it is also the backbone of every marketing automation platform out there.
Identifiers in reply-to and unsubscribe links
The reply-to address and unsubscribe URL often carry a token tied to your subscriber record. Unsubscribing is generally fine, but the token also confirms that a real person actively reads the address — valuable on its own. Replying, even curtly, confirms the same. You can usually see these tokens by reading the email headers.
Cross-service stitching
The sophisticated systems do not stop at email. The ID in your pixel can be matched to cookies the same company dropped in your browser elsewhere. Once matched, your opens and your browsing become two sides of one profile, known by an internal customer ID rather than your name. The result is the same: they know what you read, ignore, and eventually buy.
The side effects you actually notice
- Newsletters that somehow know which articles you opened
- Re-engagement emails timed to the hour you usually check mail
- Web ads for things you only ever clicked inside an email
- A “we miss you” sequence that fires because you stopped opening
- Different offers from what a friend is shown
None of it is illegal, none required a specific opt-in, and nearly all of it ships on by default in modern email platforms.
How to stop email tracking
The whole system leans on a few behaviours, and you can opt out of each.
1. Disable remote image loading
The pixel only fires if your client loads remote images. Turn that off and it cannot report what it was never asked to deliver.
- Gmail (web): Settings, General, Images, “Ask before displaying external images.”
- Apple Mail: Settings, Mail, Privacy Protection — turn on “Protect Mail Activity” (loads images via Apple’s proxy and hides your IP).
- Outlook: Trust Center, Automatic Download, block automatic image downloads.
- Thunderbird: Privacy and Security, untick “Allow remote content in messages.”
2. Use a client that strips trackers
Proton Mail and Tuta block known pixels; DuckDuckGo Email Protection rewrites and cleans tracked mail in transit; Apple Mail’s Privacy Protection blocks pixels at the system level.
3. Skip sign-ups you do not need
Every newsletter is one more sender with a profile of you, and many were just the price of one article. A temporary email handles those moments without adding to your subscriber footprint — see ten everyday examples.
4. Use aliases for the newsletters you want
For ones you genuinely want, an email alias (Apple Hide My Email, SimpleLogin, Firefox Relay) gives each sender its own address you can switch off if it misbehaves.
5. Be selective about replying
If a marketing email asks you to reply to “confirm interest,” ignore it. The reply is a data point. Automation is not a conversation, however warmly it is framed.
What changes after you adopt these habits
Email tracking fades quietly once the defaults are set. Newsletters still arrive, you still read and click the ones you wanted. What stops is the silent reporting on every action inside your inbox. The automation on the other end keeps sending, but with far less to work with, so its timing and targeting become guesses rather than hits. Over a few months: fewer eerily-targeted offers, and an inbox that feels like yours again.
A word on balance
Not every newsletter that tracks opens is sinister; a tiny publication wanting to know if anyone reads uses the same tools as a multinational. The point is not to villainise tracking but to put you back in control of what gets reported and to whom. Today’s defaults favour senders. A few settings flip that back toward you. (Want to go further? Here are the platform privacy settings worth changing.)