Most marketing emails report back the moment you open them. The mechanism is a single transparent pixel, and it has been hiding in plain sight for two decades.
A tracking pixel is a 1x1 transparent image hidden in an email. When your mail app loads it, it silently reports your open time, IP address, rough location, and device back to the sender, tied to a token unique to you. To block them, turn off remote images in your mail client or switch to a privacy-first service.
What a tracking pixel is, and what it sees
A 1×1 transparent image embedded in the HTML of an email that is meant to be invisible for you. When you open the email and your mail client renders the message, it fetches that image from the sender’s servers, and the fetch itself is the tracking event. Your mail client thinks it’s fetching an image to show as part of the email content, but in fact it is unknowingly sending a bunch of your metadata to the email sender:
- a timestamp, set when you open it and reset every time you reopen it;
- your IP address, which resolves to city-level location;
- your user-agent: device, operating system, and mail client;
- a token unique to you, baked into the pixel’s URL, so the sender knows which recipient opened.
That last part is what turns an anonymous image into surveillance.
Nerdy details: How to spot a tracking pixel?
You can see the original, raw HTML of a message in most mail clients. Look for tags that are styled to be invisible – no borders, no decorations, zero width or height, etc. Here’s an example of a real tracking pixel extracted from a real message (domain and keys obfuscated):
<img src="https://link.news.example.com/wf/open?upn=3Du001.Mpz....kfW2" alt=""
width="1" height="1" border="0"
style="height:1px !important;width:1px !important; border-width:0 !important;margin: 0 !important;padding: 0 !important;"/>Notice the width and height part - these mean that the size is 1x1 - a single pixel, hence the name.
The upn= value is the unique token that enables the sender to associate your mailbox address to the data that the pixel sends.
Every major email platform uses tracking pixels: Mailchimp, Klaviyo, HubSpot, sales-outreach tools like Mailtrack and Yesware, most newsletters, and most news organizations. In 2021 the email service Hey reviewed inbound mail to its users’ personal accounts for the BBC and found spy pixels in two-thirds of it, after setting spam aside (BBC, February 2021). Pixels are the rule, not the exception.
Why “Apple fixed it” is only half true
Apple announced Mail Privacy Protection at WWDC in June 2021 and shipped it that September with iOS 15 and macOS Monterey. When it is on, Apple Mail pre-fetches every remote image through Apple’s proxy servers before you open the message, masking your IP address and the open timestamp. The pixel still fires, but the data it returns is noise. That is real protection.
The catch is in the scope. Mail Privacy Protection is a feature of the Apple Mail app, not of your iPhone. Read the same message in the Gmail app, Outlook, Spark, or Edison on the same device and you are tracked normally, because each app handles images its own way.
Gmail has its own twist. It has routed remote images through Google’s proxy servers since 2013, which hides your IP from the sender. But the open event still fires the first time the proxy fetches the pixel, and the timing is close enough for marketers to act on.
No mainstream client gives you total pixel privacy out of the box; you have to turn it on yourself.
How to actually block them
Ranked, most reliable first.
- Block remote images in your mail client. The most dependable fix, and the bluntest: it breaks legitimate images too. Gmail (web): Settings → General → Images → Ask before displaying external images. Apple Mail (iOS): Settings → Apps → Mail → turn off Load Remote Images. Outlook (desktop): Trust Center → Automatic Download → keep Don’t download pictures automatically checked. Thunderbird blocks remote content by default; leave that setting alone.
- Move to a privacy-first email service. Proton Mail and Tuta strip trackers and hold back remote images by default, with no setup.
- Use a client that filters pixels. Hey strips spy pixels from every message and names the sender that planted one.
- Add a webmail extension. Trocker flags and blocks pixels inside Gmail, Outlook, and Yahoo. Extensions in this category come and go and break with browser updates, so confirm one is still maintained before you depend on it.
- Read in plain text. Plain text strips every image and style. The formatting suffers, and nothing slips through.
Regulators are starting to treat pixels like cookies. France’s data authority, the CNIL, adopted a recommendation (Délibération n° 2026-042 of 12 March 2026, published 14 April 2026) that makes prior consent the general rule for tracking pixels, with narrow exceptions for transactional and deliverability purposes. A separate post will cover what that means in practice.
The takeaway
Every marketing email you open is a small data leak unless you closed it yourself. The pixel never asks for permission. Rendering the message is consent enough, as far as the sender is concerned.
Blocking pixels in one client only protects you in that client. Open the same inbox on your phone, or in another app, and the pings resume. The one fix that follows you everywhere is removing the sender. Unsubscribing stops the pixels at the source, on every device, for good. That is the same reasoning behind the rules for safely unsubscribing, and it is why we built our tool to opt you out for real instead of hiding the mail behind a filter. A filter needs ongoing access to your inbox to keep working; if you’re weighing any unsubscribe app, check what inbox access it really needs first. Fewer senders mean fewer tracking pixels on every device you own.
