How to Stop Email Trackers Watching You Read

If you want to stop email trackers, the first step is understanding how quietly they operate. A large share of commercial email (newsletters, receipts, sales outreach, even some personal mail sent through 'read receipt' tools) contains a tracking pixel: a tiny, invisible image hosted on the sender's server. The moment your mail client loads that image, the sender's server records the request. No click required; merely opening the message is enough.

What does one pixel load reveal? Typically the time you opened the email, how many times you re-opened it, your rough location (from your IP address), and what device and mail client you used. Sales tools openly advertise this: they tell the sender 'she opened your email three times on her phone this morning' so the follow-up call can be timed accordingly.

There is no exotic technology involved. HTML email can embed remote images, and an image URL can be unique to you. When the sender builds your copy of the newsletter, the pixel's address includes an identifier tied to your email address. Your client fetches the image; their server logs which identifier fetched it, from which IP, with which user-agent string. That is the entire mechanism.

Links get the same treatment. Nearly every link in commercial email points first at a click-tracking redirect that records you before bouncing you to the real destination. That is why links in newsletters look like long strings of gibberish rather than the site they claim to lead to.

The bluntest fix is telling your mail client not to load remote images automatically. If the pixel is never fetched, the open is never recorded. Gmail, Apple Mail, Outlook and Thunderbird all offer this in settings, usually under 'images' or 'external content'. Emails look plainer, and you tap once to load images when you actually want them.

Some providers go further and proxy images: they fetch every image through their own servers, which hides your IP address and device, though the sender may still learn that the message was opened. Apple's Mail Privacy Protection takes this approach, deliberately fetching pixels in a way that drowns real opens in noise. Proxying is a good default; full blocking is stronger.

For click tracking, caution beats tooling. Hover before you click and look at the real destination in the status bar. For newsletters you genuinely read, going straight to the publication's website costs you nothing and tells the tracker nothing.

Reading email as plain text where your client supports it removes both pixels and most link disguises at once, a spartan but extremely effective option for the most privacy-sensitive.

One nuance on unsubscribe links specifically: for senders you recognise and trust, the link (or your mail client's built-in unsubscribe button, which uses a standardised header) is safe and appropriate. The caution applies to mail you never asked for: there, any click, including unsubscribe, confirms a live reader.

Image blocking hides your behaviour, but the tracker still holds the most valuable datum of all: your email address, which links your activity across every list you are on. Data brokers join profiles on exactly that key. The structural fix is to stop giving every sender the same address.

When each sender writes to a different alias, cross-referencing collapses: the address that identifies you in one database matches nothing in any other. And an alias layer in front of your inbox gives you an enforcement point: filtering happens at the relay, before mail (and its pixels) reaches your client at all. On HideMy.world, for instance, each address carries its own rules, so a newsletter that turns pushy can be quietly silenced (or its alias deleted outright) without your real inbox ever being involved.

Aliases also fix the unsubscribe dilemma. Clicking 'unsubscribe' in shady mail confirms your address is live, which is why spammers include the link at all. Deleting the alias unsubscribes you from everything that sender will ever try, with no confirmation signal sent.

You do not need all defences at maximum. A pragmatic layering:

Be clear-eyed about limits. If you reply to a tracked email, the sender knows you read it, whatever your image settings. If you click through and buy something, the shop links your purchase to your address regardless of pixels. And your mail provider itself necessarily sees your mail. No client-side setting changes that; only your choice of provider does.

But those limits do not make the defences pointless. The passive surveillance layer (the silent record of every open, re-open, time and place) is entirely optional, and switching it off costs you almost nothing. Your reading habits are yours. Keep them that way.