How to Detect Email Tracking Pixels in Gmail

Every email you open in Gmail might be sending a silent report back to the sender. That report contains when you opened the message, how many times you read it, what kind of device you were on, and — depending on your setup — a location derived from your IP address. The mechanism behind all of this is the email tracking pixel, a technique so widespread that roughly 68% of all commercial email sent today contains at least one, according to industry estimates from 2026. This article shows you exactly how to detect email tracking in your own inbox and what to do about it.

Key Takeaways

• Approximately 68% of commercial emails sent in 2026 contain at least one tracking pixel embedded in the HTML, according to industry data.
• A tracking pixel is a 1x1 transparent image that fires an HTTP request to the sender's server the moment Gmail renders it, confirming the open and transmitting metadata.
• Gmail's image proxy hides your IP address but does not prevent the open event from being recorded, meaning senders still know you read their email.
• The "Show original" feature in Gmail lets you inspect raw HTML and identify tracking image URLs without installing any software.
• Browser extensions including Gblock, PixelBlock, Ugly Email, and Trocker automate detection and blocking directly inside Gmail.

What Is an Email Tracking Pixel?

An email tracking pixel is a 1x1 transparent GIF or PNG image embedded in the HTML of an email. You never see it. When Gmail loads the email and renders its images, your browser or mail client makes an HTTP GET request to fetch that tiny image from the sender's server. That request is the tracking event.

The server on the other end logs the request timestamp, the User Agent string (which reveals your browser, operating system, and device type), and the originating IP address. The image URL itself usually contains a unique identifier tied to your email address, so the sender's platform knows exactly who opened the message and when.

A typical tracking pixel looks like this in raw HTML:

<img src="https://track.mailplatform.com/open/abc123xyz/pixel.gif" width="1" height="1" style="display:none" />

The abc123xyz portion is your unique recipient token. The moment Gmail fetches that URL, Mailchimp or HubSpot or Salesforce logs your open.

What Data Does a Tracking Pixel Expose?

The HTTP request that fires when a pixel loads carries more information than most people expect:

• Open timestamp: The exact date, time, and timezone when the email was rendered.
• IP address: Routes to an approximate geographic location — typically accurate to city level.
• User Agent: Reveals the browser (Chrome, Safari, Firefox), operating system (Windows 11, macOS, iOS 18), and whether you are on desktop or mobile.
• Email client: Combined with User Agent, senders can identify whether you are using the Gmail web app, the Gmail Android app, Apple Mail, or Outlook.
• Repeat opens: Every time you open the same email, a new request fires — unless the image is cached. Senders can see you opened a pitch email six times before the weekend.

Sales teams use this data to time follow up calls for when you are actively reading. Marketing platforms use it to segment audiences by engagement level. That is not a theoretical threat — it is the default behavior of every major email service provider on the market today.

Does Gmail Protect You From Tracking Pixels?

Gmail introduced its image proxy in 2013. Every image in every Gmail message — including tracking pixels — is fetched by Google's servers before the email is displayed to you. By the time you open the message, the pixel has already been loaded by Google's infrastructure, not by your device directly.

This provides partial protection. Your personal IP address is hidden behind Google's proxy servers, so the sender sees a Google data center IP rather than your home or office connection. That removes the most precise location signal.

But the protection stops there. The open event itself still fires. Google's proxy fetches the pixel on your behalf, which means the sender's server still records an open — it just sees Google's IP instead of yours. The timestamp is still logged. Your User Agent, including your browser and OS, is still transmitted.

The fundamental conclusion: Gmail's proxy anonymizes your network location but does not prevent tracking. Senders using platforms like Mailchimp, HubSpot, or Salesforce still know you read their email.

How to Manually Inspect an Email for Tracking Pixels

You do not need any software to run a basic email tracking test. Gmail's "Show original" feature gives you access to the raw HTML source of any message.

Step by step:

1. Open the email you want to inspect in Gmail (web browser, not the mobile app).
2. Click the three-dot menu icon in the top right corner of the email, next to the reply button.
3. Select "Show original" from the dropdown.
4. A new tab opens with the full message source. Press Ctrl+F (or Cmd+F on Mac) to open the browser's find tool.
5. Search for these strings one at a time: track, pixel, beacon, open, 1x1, width="1", display:none.

Any image tag pointing to an external domain with these strings in the URL or surrounding attributes is almost certainly a tracking pixel. A few real-world patterns to recognize:

• t.sidekickopen.com — HubSpot's legacy tracking domain
• mandrillapp.com/track — Mailchimp/Mandrill opens
• click.pstmrk.it — Postmark link tracking
• t.salesforce.com — Salesforce Marketing Cloud
• wf.jira-mail.com — Atlassian notification tracking

Tools That Detect Email Tracking Automatically

Several browser extensions sit inside Gmail and flag tracking pixels before you even open an email. They operate on the rendered HTML directly in your browser, so they can identify and neutralize pixel requests before the image fetch completes.

Gblock

Gblock is a Gmail-specific privacy extension that blocks tracking pixels and strips tracking parameters from email links. It maintains an auto-updating blocklist of known tracking domains, so it stays current as email platforms rotate their infrastructure. Unlike ad blockers that operate at the network level and often fail inside Gmail's sandboxed interface, Gblock integrates directly with the Gmail web app. It also handles click tracking — the redirected URLs that hide your destination and log every link you click inside an email — which pixel-only blockers leave untouched.

PixelBlock

PixelBlock is a lightweight Chrome extension focused exclusively on tracking pixel detection. It shows a red eye icon in the email header when a tracking pixel is detected. It does not block tracking links, and its blocklist updates are less frequent than Gblock's, but it is a solid choice for users who want a simple, single-purpose tool. A direct comparison of what each blocks is available in the PixelBlock vs Gblock guide.

Ugly Email

Ugly Email adds a small eye icon next to emails in your Gmail inbox that contain known trackers, so you can see which senders are tracking you before you open anything. It supports a wider range of tracker signatures and shows you the platform name (Mailchimp, Yesware, etc.). It does not strip tracking links from URLs.

Trocker

Trocker (short for Tracker Blocker) blocks both pixel trackers and link trackers in Gmail. It provides a count of blocked trackers per email and shows you which domains were attempting to track you. Community-maintained blocklists mean coverage can vary, but it is a capable open source alternative.

Which One Should You Use?

If you only want a quick visual alert without configuration, Ugly Email or PixelBlock require almost no setup. If you want comprehensive protection that blocks both pixels and link trackers, and stays inside Gmail without routing your traffic through an external proxy, Gblock is the more complete solution. Users concerned about AdGuard's limitations inside Gmail — AdGuard blocks trackers at the network level but loses visibility inside Gmail's sandboxed rendering — will find a Gmail-native extension covers the gaps AdGuard misses.

Which Senders Are Most Likely Tracking You?

Tracking pixels are not limited to marketing emails. Any sender using a platform with open tracking enabled embeds them by default. The biggest sources you are likely encountering daily:

• Mailchimp: Enabled by default in all campaigns; uses list-manage.com and Mandrill infrastructure.
• HubSpot: Embedded in both marketing emails and individual sales emails sent through HubSpot CRM.
• Salesforce Marketing Cloud: Enterprise campaigns from banks, airlines, and retailers.
• Klaviyo: Dominant in e-commerce, tracking every open from every Shopify or WooCommerce store that contacts you.
• LinkedIn: Notification emails from LinkedIn embed tracking pixels tied to your profile activity.
• Yesware, Boomerang, Right Inbox: Individual sales reps using Gmail extensions send tracked emails from personal accounts — these are the most invasive, because a real person is watching a notification the moment you open their pitch.

What to Do When You Find Tracking Pixels

Once you have confirmed that emails in your inbox contain trackers, you have several options in order of effectiveness:

1. Install a blocking extension: This stops future pixel fires before they reach the sender's server. Gblock, PixelBlock, Ugly Email, or Trocker all work in Chrome and Chromium-based browsers.
2. Disable automatic image loading: In Gmail settings, go to Settings > General > Images and select "Ask before displaying external images." This prevents any image from loading until you approve it. The downside is you lose all images in every email, including logos and product photos that are not trackers.
3. Unsubscribe from marketing lists: Reduces the volume of tracked email reaching your inbox, though individual sales emails from CRM platforms are harder to avoid.
4. Use the manual inspection method: For any suspicious email, run the "Show original" check described above before opening it in the normal view.

The reality is that option one — a dedicated blocking extension — is the only approach that lets you use Gmail normally while staying protected. Disabling images breaks the reading experience. Manual inspection is useful for auditing but not practical at inbox volume.

Why Most People Have Never Noticed

Tracking pixels work precisely because they are invisible. A 1x1 image with display:none or width="1" height="1" renders as nothing. Even technically sophisticated email users rarely think to inspect the source of a newsletter or a sales email. The tracking industry counts on that invisibility — the 68% figure cited above did not happen by accident. Open tracking is enabled by default in almost every major email platform, and senders have no regulatory obligation in most jurisdictions to disclose it to recipients.

The CNIL in France gave email marketers a July 14, 2026 deadline to obtain explicit consent before tracking, and the EDPB has launched a GDPR crackdown on undisclosed email tracking — but those rules apply to European senders and recipients, and enforcement is still maturing. For Gmail users outside the EU, and for anyone receiving email from US-based senders, the default remains: tracked until you block it yourself.

Installing Gblock takes about 30 seconds. After that, every email you open in Gmail is scanned against an updated list of tracking domains, pixels are blocked before they fire, and tracking links are stripped so the sender cannot see which links you clicked or when. No configuration required, no traffic rerouted through a third party server, no images disabled. Your inbox looks exactly the same — the only difference is that the surveillance stops.