A tracking pixel (also called a web beacon or spy pixel) is a transparent 1x1 pixel image embedded in an email or webpage. When your email client or browser loads the pixel, a request is sent to the tracker's server — revealing your IP address, email client, operating system, and the exact time you opened the message.
What Tracking Pixels Collect
- Your IP address (and therefore your approximate location)
- Whether and when you opened an email or visited a page
- How many times you opened or viewed the content
- Your email client or browser and operating system
- Your device type (desktop, mobile, tablet)
Where Tracking Pixels Are Used
| Context | Who Uses Them | Purpose |
|---|---|---|
| Marketing emails | Newsletters, e-commerce, SaaS | Measure open rates, track engagement |
| Websites | Advertisers, analytics providers | Track visitors, build ad targeting profiles |
| Personal emails | Recruiters, salespeople, investigators | Know when and where you read their message |
How to Block Tracking Pixels
- Email clients — Enable "block remote images" in Gmail, Outlook, or Apple Mail. Apple Mail's Mail Privacy Protection pre-loads all remote content through Apple servers, masking your real IP.
- Email apps — Hey.com and Proton Mail block tracking pixels by default
- Browser extensions — uBlock Origin blocks tracking pixels on websites
- VPN — Masks your real IP address even if a pixel loads, so the tracker sees the VPN's IP rather than yours
People Also Ask
- Can I tell if an email has a tracking pixel?
- Not easily by looking at it. You can view the email's raw HTML source and search for 1x1 image tags or known tracker domains. Tools like PixelBlock (Chrome extension) or Hey.com's spy pixel blocker can detect and report tracking pixels automatically.
- Are tracking pixels legal?
- In most countries, yes — though regulations are evolving. The GDPR requires consent for tracking in emails and websites targeting EU residents. In the US, there is no federal law specifically prohibiting email tracking pixels, though healthcare-related tracking faced FTC scrutiny in 2022.
Related: Cookies | Metadata | Browser data leaks