Is GoHighLevel Tracking Your Email? How to Block It

GoHighLevel email tracking is probably already in your inbox under a name you have never seen. The appointment reminder from your dentist, the class schedule from your gym, the listings note from a local realtor: small businesses often hand marketing to an agency, and agencies often run it on HighLevel with their own logo on top. HighLevel's company timeline says it was powering 2.2 million businesses in 2025. Open one of those reminders and the platform can log it. Click, and it can start the next automated step. Here is what HighLevel documents, what we confirmed ourselves, and how to shut it off.

Key Takeaways

• HighLevel's workflow documentation states that the Opened email event "fires when a recipient loads the tracking pixel in your email," and that Clicked fires on any tracked link.
• LC Email, HighLevel's built in sending service, lets each business switch Open Tracking and Click Tracking on or off per dedicated sending domain, and HighLevel recommends keeping both on.
• Seven shared sending domains HighLevel lists for LC Email, including mg.msgsndr.net, publish Mailgun mail servers in DNS, and each one's email subdomain points to mailgun.org.
• White label branding plus a dedicated sending domain can hide the msgsndr addresses entirely, so the business name is usually all a recipient sees.
• Gmail's image proxy hides your IP address but still fetches the pixel when you open the email, so only blocking images or the pixel stops the open being logged.

What Is GoHighLevel, and Why Haven't You Heard of It?

GoHighLevel, officially HighLevel, is an all in one CRM and marketing automation platform that agencies resell under their own brand, so businesses emailing you almost never mention it. Its whitelabel domain guide shows the goal: clients log in at an address like app.myawesomedomain.com instead of app.gohighlevel.com.

The second name you may spot is LeadConnector. HighLevel's LC Email migration guide tells agencies to "select LeadConnector as the default provider," and What is LC Email? describes "the built-in email service provider that powers sending and receiving on every sub-account." LeadConnector email tracking and GoHighLevel email tracking are the same system. Sending costs $0.675 per 1,000 emails, so a clinic reminding 4,000 patients pays about $2.70, with no separate line for tracking.

HighLevel's privacy policy says it acts "as a processor and service provider" for customers, and that "our customer's privacy notice, rather than this Privacy Policy, will apply." The dentist's privacy notice governs your open data, not HighLevel's.

Does GoHighLevel Track When You Open Its Emails?

Yes, whenever the sending business leaves open tracking switched on, which is what HighLevel recommends. The Email Tracking for LC Email article, last modified 30 June 2026, puts "Click Tracking" and "Open Tracking" toggles in each dedicated sending domain's Domain Settings, and its FAQ says: "We recommend keeping email tracking enabled."

The mechanism is the classic spy pixel. HighLevel's email event trigger guide says "Opened fires when a recipient loads the tracking pixel in your email," and "Any contact who performs the selected email event will be enrolled into this workflow automatically." Your open is not a number on a chart. It is an input that can start the next email or text.

HighLevel's help center contradicts itself on Mailgun

The LC Email article says tracking is "ONLY available if you are using LC Email," not Mailgun. Yet How to Set Up Click and Open Tracking for Mailgun walks agencies through a webhook to services.leadconnectorhq.com so "your CRM will start receiving click events, open events" in real time, and the email statistics troubleshooting page says "SMTP integrations only show opened and clicked." The consistent reading: the toggle and contact level analytics are LC Email features, but opens can reach HighLevel through other providers too. For a recipient, the provider barely matters.

Does GoHighLevel Track Link Clicks?

Yes, twice over: links are wrapped at the mail provider, and HighLevel adds its own trigger links. The LC Email FAQ confirms that with click tracking on, "links in your emails are wrapped through a tracking redirect so clicks can be recorded." HighLevel's guide to fixing links that don't open names the host pattern: mg.companyname.com tracks through email.mg.companyname.com.

The second layer is built for automation. HighLevel's trigger links overview says a click is recorded "in the contact's activity timeline" and fires a workflow action. Its own example: "When a contact clicks on a trigger link in an appointment reminder email, the system records the click and triggers the next step in the workflow, such as sending a survey or review request." Agencies can brand these links with their own API domain.

What Does a GoHighLevel Open or Click Record?

HighLevel documents a per contact event log, and the Mailgun infrastructure underneath LC Email can capture considerably more. The split looks like this:

The Mailgun rows come from its webhook payload reference. HighLevel does not say which of those fields it keeps, so treat location and device as what the pipe can carry, not what the dentist necessarily sees. Its Bot Detection Prevention setting, under which "bot-driven opens and clicks are filtered out," shows it wants to count humans. Our breakdown of Mailgun's own tracking pixel covers that layer.

How Can You Tell an Email Came From GoHighLevel?

Check the sending address, the Gmail "via" line and the link hosts; no single clue is proof, but together they are a strong indicator. HighLevel's dedicated sending domain guide gives you most of the fingerprints.

• A rewritten From address. On shared domains, HighLevel confirms recipients see something like support+yourbusiness.com@mg.msgsndr.com.
• A known LC Email domain. The migration guide lists mg.msgsndr.org, mg.msgsndr.net, replies001.msgsndr.com, replies.msgsndr.com, replies000.msgsndr.com, ec1.msgsndr.org and ec1.msgsndr.net.
• A "via" line. By default, HighLevel says its servers appear in the "sent on behalf of" or "sent via" headers.
• Link hosts starting with email. Hover before you click. A host like email.mg.somebusiness.com matches the tracking CNAME pattern HighLevel documents.
• The raw headers. In Gmail, choose Show original from the three dot menu and search for msgsndr or mailgun.

A dedicated sending domain strips the first three clues, leaving only the link host. Our guide to detecting email tracking pixels in Gmail explains how to read Show original.

What our DNS and HTTP checks showed

On 17 September 2026, dig showed all seven documented LC Email domains using mxa.mailgun.org and mxb.mailgun.org for mail and v=spf1 include:mailgun.org ~all for SPF, with each email subdomain, such as email.mg.msgsndr.net, a CNAME to mailgun.org. An invented subdomain returned nothing, so this is not wildcard DNS. HighLevel's migration guide agrees: its sample error says a domain "is already configured inside a Mailgun account."

Then curl https://email.mg.msgsndr.net/o/abc123, with a made up token, returned HTTP 200, a 43 byte 1x1 GIF and cache-control: no-store, as did email.mg.msgsndr.org and email.ec1.msgsndr.org. That is an indicator, not proof: a fake Host header sent straight to the mailgun.org address got the same GIF, so these hosts land on Mailgun's generic tracking front end. We have not captured a live HighLevel message.

How Do You Block GoHighLevel Email Tracking in Gmail?

Stop images loading on their own and stop clicking wrapped links. The same defences work against the sales plugins in our guide to email tracker Chrome extensions and how to block them, but for HighLevel mail the steps are these:

1. Turn off automatic images. Per Google's Gmail help page: Settings, See all settings, Images, choose "Ask before displaying external images," then Save Changes.
2. Don't lean on the proxy. Since 2013, Gmail has served images through Google's own secure proxy servers. Google says that stops senders using images to "get information about your computer or location," but the proxy still requests the pixel when you open the message, so the open is logged. We did not test whether it honors the no-store header on a reopen.
3. Hover before you click. If a button points at an email. host instead of the business's website, type the site address yourself. That skips the redirect and any trigger link.
4. Unsubscribe knowingly. HighLevel logs footer opt outs as an event. Still worth doing; see whether it is safe to click unsubscribe.
5. Ask the business, not HighLevel. HighLevel's policy defers to the sender's privacy notice, so send deletion or objection requests to the business.

How Do Email Tracker Blockers Compare?

Each option below blocks something real; the question for HighLevel mail is whether it handles wrapped links as well as pixels. Our 2026 comparison of how to block email tracking in Gmail goes deeper on each one.

Branded hosts are the hard case. A dedicated domain turns email.mg.msgsndr.net into something like email.mg.yourdentist.com, which a list of vendor names alone will miss.

What Do Agencies Owe EU Recipients?

In the EU, an open pixel in a HighLevel email generally needs the recipient's consent, and that duty sits with the business and its agency, not HighLevel. The European Data Protection Board's Guidelines 2/2023 cite email pixels that "detect when the receiver reads the email" and apply Article 5(3) of the ePrivacy Directive to tracking pixels and links alike.

France made that concrete. The CNIL published its final recommendation on email tracking pixels on 14 April 2026: consent is the rule, with a narrow exemption for measuring individual deliverability on a service the recipient requested, and senders got three months to inform existing contacts and let them object. HighLevel's advice to keep tracking enabled does not change that. Agencies should audit which sending domains have Open Tracking on, whether consent covers campaign measurement, and whether open triggered workflows amount to profiling.

What This Means for Your Inbox

Most coverage of email tracking treats an open as a statistic. HighLevel treats it as a trigger. Opening a reminder can enroll you in a workflow, and clicking confirm can queue a review request, without anyone at the business pressing a key. That is why this pixel matters more than its size suggests.

The white label layer multiplies it. One agency can serve your dentist and your gym, each sending under its own name. You cannot opt out of HighLevel by brand, because you never see the brand. You can only block the mechanism, and since LC Email lands on the same Mailgun tracking front end as any Mailgun customer, blocking it once covers far more than one CRM. The same held for Keap's CRM email tracking, another small business follow up tool.

What We Could Not Verify

We did not capture a real HighLevel email, so the exact pixel and redirect URL format inside LC Email messages is unconfirmed. HighLevel's example shared address uses mg.msgsndr.com, yet that hostname returned no DNS records for us, while all seven domains in its migration guide resolve to Mailgun. HighLevel documents a tracking toggle only for dedicated domains; we found no documented default for shared ones, and no statement of which Mailgun fields it stores. Finally, link.msgsndr.com answers "OK!" from an Express server, but no HighLevel page explains it, so we are not calling it a tracker.