Is Act-On Tracking Your Email? How to Block It

Most email trackers stop at the open. Act-On email tracking is built to do something more ambitious: connect the message you just read to the pages you browse next, and file both under your name. Act-On's own documentation says so plainly, which is unusual and genuinely useful, because it means you do not have to guess what is happening.

Key Takeaways

• Act-On adds an invisible 1 pixel image to every email it sends, and that pixel is unique to each recipient, according to Act-On's own Tracking and Cookies Overview.
• Pixel data can include your IP address and approximate geolocation, which Act-On states is used for reporting and segmentation.
• The Act-On Beacon Tracker is JavaScript that sets a cookie named wp plus the account number, so account 12345 produces a cookie called wp12345.
• That cookie is a first party cookie when the sender has configured a CNAME record on a marketing domain, and a third party cookie registered to actonsoftware.com when they have not.
• Clicking a single link in an Act-On email converts you from an anonymous visitor into a known prospect, after which your website behaviour is tied to your email address for as long as the cookie survives.

Does Act-On Track Email Opens?

Yes, on every HTML message, by default. Act-On's documentation states that when Act-On sends an email it "adds an invisible 1-pixel image to the message" and that the pixel is "unique to each recipient, so when it loads, Act-On can record open behavior and engagement metrics."

The uniqueness is the part worth pausing on. A shared pixel would tell a marketer that somebody opened the campaign. A pixel minted per address tells them that you opened it, at a specific minute, from a specific network.

Act-On also documents what rides along with the request: pixel data "can include the recipient's IP address and approximate geolocation information, which is used for reporting and segmentation." Segmentation is the operative word. Your location is not logged for a chart; it becomes a criterion a sender can build a list on. If you have read our breakdown of what Marketo tracks in email, the shape will look familiar.

What Is the Act-On Beacon Tracker Cookie?

The Beacon Tracker is JavaScript a sender installs on their website, and it drops a cookie named wp followed by their Act-On account number. Account 12345 produces a cookie called wp12345. Find a cookie shaped like that in your browser's storage inspector and you are looking at Act-On.

Act-On describes the beacon's job as recording "behaviors taken on your website, landing pages, or forms" and sharing that cookie data back to the Act-On platform. Whether it counts as a first party cookie depends entirely on how the sender set it up:

• Configured correctly. With a CNAME record on a marketing domain, the cookie is registered to the sender's own domain, making it a first party cookie that browser third party cookie restrictions largely do not touch.
• Not configured. The cookie comes from actonsoftware.com instead, making it a third party cookie subject to the usual blocking.

Note the incentive that creates. The properly configured, professionally deployed version of Act-On tracking is the version that is harder to block. Doing it right, from a marketer's point of view, means doing it in a way your browser cannot easily refuse. That is the entire logic of the CNAME cloaking pattern, and it is why the browser side death of the third party cookie changed less about marketing automation than the headlines suggested.

What Does Act-On Learn When You Open an Email?

A per recipient record that the sender can click straight through to. Act-On's sent message report is not only a set of totals; its documentation notes you can "click on many of the numbers to drill down to a list of the matching contacts."

What the reports expose, per Act-On's own help centre:

• Opened and Total Opened. Unique addresses that opened, plus repeat opens by the same person.
• Clicked and Total Clicked, with clickthrough tracking broken down by individual link in the message.
• Last Opened and Last Clicked timestamps.
• Device and client. Act-On documents that "device and client are detected from the tracking pixel when a contact opens an HTML email," using third party libraries to read that signal.
• IP address and approximate geolocation, per the tracking overview.
• Spam complaints and opt out events, also drillable to the contacts behind them.

There is one accidental piece of good news in that device documentation. Act-On warns its own customers that Gmail, Google Workspace, Yahoo Mail and Apple Mail Privacy Protection "route images via a proxy server," so "Act-On sees the proxy's signature, not the recipient's device." Senders are told to expect large counts of Unknown Device and Default Browser Client. Gmail's image proxy is degrading Act-On's device fingerprinting badly enough that Act-On had to publish a support article about it.

How Does One Click Turn You Into a Named Profile?

Because clicking a link in an Act-On email is one of exactly two documented ways to convert an anonymous visitor into a known one. Act-On's known versus anonymous visitors documentation defines known prospects as those with an email address associated with them in Act-On, obtained "through either form submission or clicking Act-On email links."

Before that click, Act-On ties your browsing to your company name, or to your internet service provider if the company cannot be resolved. After it, the documentation says, "their website behavior will be tied to their email as long as they have the Act-On tracking cookie in their browser."

Sit with the asymmetry there. Submitting a form is a deliberate act with a visible cost: you typed your address, you knew you were handing it over. Clicking a link in a newsletter feels like nothing at all. Both produce the same outcome in Act-On's data model. The cheapest possible gesture and the most considered one are treated as equivalent consent signals.

One more detail: Act-On's beacon has a Standard Mode that "will cookie all visitors" and an Opt-In Only Mode that asks first. Which one you meet is the sender's choice, and nothing on the page tells you which is running.

Is Act-On Email Tracking Legal Where You Live?

In Europe, a tracking pixel needs consent. The EDPB's Guidelines 2/2023 on the technical scope of Article 5(3) of the ePrivacy Directive concluded that a tracking pixel instructs the recipient's device to send information to a remote server, which brings it inside the consent requirement. That reasoning turns on the technical act, not the marketing relationship.

National regulators have followed with specifics. France's CNIL issued email pixel guidance with a compliance deadline, and we covered the CNIL recommendation when it landed. In the United States there is no federal equivalent, but class action litigation arguing that an unconsented email pixel is an interception under state wiretap statutes keeps arriving.

Act-On's privacy policy says it does not sell personal information as that term is commonly understood. Either way, the compliance duty for a campaign sent to you sits with the sender, and you cannot tell from your inbox which senders take it seriously.

How Do You Block Act-On Email Tracking in Gmail?

Stop the image request and the pixel never fires, because an open event only exists if your client fetches the file. Three approaches, with honest tradeoffs.

Turn off automatic image loading. In Gmail, open Settings, See all settings, and under Images select "Ask before displaying external images". No pixel loads until you approve it. The cost is that every legitimate image breaks too, which is why most people abandon this within a week.

Audit a sender by hand. In Gmail on desktop, use the three dot menu, choose Show original, and search the raw source for actonsoftware.com or a one pixel image carrying a long unique identifier. Our walkthrough on detecting tracking pixels in Gmail covers the full method. Good for settling one question; unworkable as a habit.

Clear the wp cookie, and keep clearing it. Deleting a wp12345 cookie severs the link between your browsing and your contact record until the next time you visit that site. It is a reset, not a fix.

Act-On Blockers Compared

No blocker catches everything, and the differences between them are narrower than the marketing suggests. Here is where each one lands against Act-On specifically.

• Ugly Email. Flags tracked messages with an eye icon in the Gmail list before you open them. An early warning system more than a full stripper.
• PixelBlock. Blocks open pixels and reports the blocks, but leaves rewritten tracking links alone. That gap matters with Act-On, since the click is what converts you into a known prospect.
• Trocker. Works across several webmail providers and shows where the pixel sits in the message.
• Proton Mail. Blocks remote content and proxies images by default. Genuinely strong, but it requires moving your email.
• HEY. Its spy pixel blocker is built in and names the offending sender. Same tradeoff as Proton: you are changing providers, not adding a filter.

Gblock sits in the extension category, and its differences are specific rather than sweeping. It runs inside Gmail, so you keep the account and interface you already have. Its blocklist updates automatically, which matters because marketing automation vendors add and retire tracking hostnames continuously and a static list decays. And it strips tracking links as well as pixels, which addresses Act-On's click based identification directly.

What it will not do is guarantee coverage. A sender who serves an Act-On pixel from a custom subdomain on their own marketing domain defeats domain matching by construction, and the CNAME setup actively encourages that. Our comparison of Ugly Email, PixelBlock and Trocker and our wider roundup of email tracker blocker extensions lay out where the ceiling sits. Domain blocking is a very good filter. It is not a wall.

The Practical Bottom Line

Act-On deserves credit for documenting the mechanics in public, and its Tracking and Cookies Overview is more forthcoming than several larger competitors manage. But transparency in a help centre is not a control you can exercise. There is no recipient level Act-On preference, and unsubscribing removes you from one list while leaving the pixel intact on mail from every other Act-On customer. The one place you have real leverage is your own client, before the image request leaves.