Is Jotform Tracking Your Email? How to Block It

The short answer on Jotform email tracking is no, with an asterisk large enough to matter. The autoresponder that lands in your inbox after you fill out a Jotform, and the notification that goes to the form owner, carry no open tracking pixel. There is no setting to add one. Jotform support has said so plainly for years. What Jotform does have is a privacy policy reserving the right to embed page tags in email, and a marketing stack already using them on its own customers.

Key Takeaways

• Jotform notification and autoresponder emails ship no open tracking pixel, and the settings panel exposes only Sender Name, Sender Email, Reply-To, Send Email Later, and Hide Empty Fields (Jotform help center).
• Jotform's privacy policy states that "emails sent by Jotform or by users through our services may include page tags that allow the sender to collect information about who opened those emails and clicked on links in them."
• A DNS lookup on 20 September 2026 shows email.jotform.com publishing v=spf1 include:spf.mtasv.net -all with MX on mtasv.net, which is Postmark, while jotform.com publishes HubSpot DKIM keys at hs1-4773329._domainkey.
• Postmark disables pixel based open tracking by default; HubSpot marketing email embeds an invisible one pixel image automatically. Jotform therefore sends untracked mail on one subdomain and tracked mail on another.
• Jotform's Mailchimp, HubSpot, and ActiveCampaign integrations move your address into platforms where open tracking is on by default, so no Jotform pixel does not mean no pixel in your inbox.

Does Jotform Track Email Opens?

No. Jotform does not track opens on the emails its forms generate, and it never has. A support agent answered the question directly in a public forum thread in May 2018: "Unfortunately, we do not have an email open or bounce rate tracking." Eight years on, the feature still does not exist, and Jotform's advice is unchanged: route the mail through a marketing platform that does track.

The documentation backs this up by omission. Jotform's notification and autoresponder settings guide enumerates every control a form owner gets across the Email, Attachments, and Advanced tabs. The Advanced tab is where a tracking toggle would live if one existed. Instead it holds Sender Name, Sender Email, Send Email Automatically, Send Email Later, Update Email, Reply-To Email, and Hide Empty Fields. The default sender is noreply@jotform.com unless the owner points Jotform at their own SMTP server.

That last option is the crack in the floor. Once a form owner routes Jotform mail through their own SMTP relay, whatever that relay does with tracking is out of Jotform's hands, and Jotform neither documents nor restricts it.

Which Email Provider Does Jotform Actually Send Through?

Three of them, with three different tracking defaults. The apex record for jotform.com is the usual corporate grab bag and proves nothing on its own:

v=spf1 ip4:152.160.0.0/16 ip4:23.251.253.0/24 ip4:152.232.87.0/24 ip4:209.127.149.0/24 ip4:212.47.85.0/24 include:amazonses.com include:_spf.google.com include:4773329.spf02.hubspotemail.net -all

Google Workspace handles staff mail; Amazon SES and five owned IP ranges handle bulk. The HubSpot include is the interesting one, and DKIM confirms it rather than merely implying it: hs1-4773329._domainkey.jotform.com resolves to jotform-com.hs18a.dkim.hubspotemail.net, a record that only exists once a domain is connected for HubSpot sending.

A separate subdomain tells a cleaner story. email.jotform.com publishes v=spf1 include:spf.mtasv.net -all, its MX records point at p-pm-bounce-smtp01a-aws-useast2a.mtasv.net, and pm-bounces.jotform.com is a CNAME to pm.mtasv.net. That triple is the standard Postmark custom domain setup. Jotform also publishes p=reject DMARC, stricter than most platforms of its size bother with.

One warning, because it is easy to get this wrong. jotform.com answers every subdomain query with a wildcard A record at 8.233.166.209. track.jotform.com and click.jotform.com resolve perfectly, and so does thisdoesnotexist12345.jotform.com. A resolving tracking hostname here is evidence of nothing.

What Do Those Three Providers Do by Default?

This is where one company ends up on both sides of the argument. The three senders in Jotform's DNS hold three genuinely different postures on open tracking.

• Postmark: off. Postmark's documentation states that pixel based tracking is disabled by default and has to be switched on per message stream, a stance it hardened after Apple's Mail Privacy Protection began inflating open rates in iOS 15.
• HubSpot: on. HubSpot embeds an invisible one pixel image into the email message once it is sent, and turning it off is an explicit per email decision a marketer has to make.
• Amazon SES: opt in. SES inserts a 1x1 transparent GIF with a filename unique to each message, but only when the sender specifies a configuration set with an open event destination, per AWS documentation.

Read that as a practical rule. A transactional Jotform receipt has no commercial reason to carry a pixel, and the evidence says it does not. A product announcement or upgrade nudge to an account holder is HubSpot marketing mail, and that is tracked unless somebody actively chose otherwise.

What Does Jotform's Privacy Policy Reserve the Right to Do?

More than the product currently does, which is the part most reviews skip. Under "Information from page tags," Jotform's privacy policy says, verbatim:

"Emails sent by Jotform or by users through our services may include page tags that allow the sender to collect information about who opened those emails and clicked on links in them. We do this to allow the email sender to measure the performance of their email messaging and to learn how to improve email deliverability and open rates."

Two phrases carry the weight. "Or by users through our services" extends the disclosure past Jotform's own marketing to mail a form owner sends using the platform. "And clicked on links in them" covers click tracking, a separate technique needing a separate countermeasure. This is a disclosure of capability, not a description of a shipped feature, and Jotform is entitled to write it that way. It also means a future release could add open reporting to autoresponders without changing a word of the privacy terms or notifying you.

The compliance posture is otherwise reasonable. Jotform certifies under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. framework, and sells HIPAA ready forms. None of that constrains a tracking pixel: an open receipt sent to the party you already handed your address to is rarely the compliance question anyone escalates.

Where Does the Tracking Actually Start?

One click after you submit. Jotform's email marketing integrations push submissions straight into Mailchimp, HubSpot, ActiveCampaign, Constant Contact, and Campaign Monitor, free, with no code. Every one of those platforms treats open rate as a headline metric, which means every one of them defaults to a pixel.

The sequence that affects you runs like this. You submit a form. Jotform sends an untracked confirmation from noreply@jotform.com. In the same moment, the integration writes your address into a Mailchimp audience. The welcome email four hours later is Mailchimp mail, carries Mailchimp's pixel, and reports your open time, approximate location, and client back to the form owner. None of that contradicts "we do not have open tracking." Jotform genuinely did not track you. It handed you to something that does.

Compare this with how Typeform handles the same question, where the pixel appears or vanishes depending on whether the sender configured a custom domain. Jotform is the cleaner of the two on the transactional layer and the murkier one after it, because it never gives you a sender level signal to reason about. Everything arrives from the same noreply address until suddenly it does not.

What Does Jotform See Without a Pixel?

Plenty, just not from your inbox. Jotform's Form Analytics records views, responses, conversion rate, and average time on form, plus the submitter's country, device type, screen resolution, browser, operating system, and IP address. Owners can layer Google Analytics 4 and Tag Manager on top, and Jotform captures UTM parameters from form URLs.

That is the trade the platform makes: it reads you on the page rather than in the message. The UTM string on the link that carried you there is the most informative thing to strip before clicking, and it costs one keystroke.

How Do You Block Jotform Tracking in Gmail?

You are not blocking Jotform, because on the transactional side there is nothing to block. You are blocking the layer underneath: HubSpot on Jotform's own marketing mail, Mailchimp or ActiveCampaign on the follow up a form owner sends. That is a general email tracking problem, solved by the tools in our roundup of email tracker Chrome extensions.

Honest comparison of what is available:

• Gmail's own image setting. Switching to Ask before displaying external images is free and stops every open pixel. It also strips every legitimate image, which is why most people abandon it within a week.
• Ugly Email and PixelBlock. Long standing free Chrome extensions that flag or block known tracker pixels in Gmail. Both lean on maintained signature lists, so coverage depends on how recently those lists were updated.
• Trocker. Open source, covers pixels and surfaces tracked links, which matters here because Jotform's own policy language names link clicks alongside opens.
• Proton Mail and HEY. Both proxy or strip remote images at the server, the most thorough approach available. Both also require leaving Gmail, which for most readers is the reason they wanted an extension instead.
• Gblock. Built for people staying in Gmail. It blocks pixels against an auto updating blocklist rather than one that ages, and rewrites tracking redirects out of links so a click does not phone home. It is paid after the trial, and it does not protect a webmail client it is not installed in.

Whatever you pick, the pixel and the link are two problems, and a tool handling only the first still lets a tracked click through. Our walkthrough of how to block email tracking in Gmail covers both, and detecting tracking pixels in Gmail shows how to read the raw message source yourself.

What This Means for Your Inbox

Jotform says it serves more than 40 million users, and forms built on it arrive as event registrations, job applications, waivers, and intake paperwork. Most people fill one out without noticing the brand. The good news is genuinely good: that confirmation receipt is one of the few automated emails in a normal inbox that is not watching you read it.

The caution is that "Jotform does not track opens" is a true statement about one hop in a longer chain, and it is the hop with the least commercial value. Treat vendor tracking claims as scoped to the product described, never to the mail you receive as a consequence of using it. The pixel rarely sits in the receipt. It sits in whatever the receipt signed you up for, which is why email tracking software is better understood by category than by vendor.

Practically: run a blocker that handles pixels and tracking links together, trim UTM parameters off form links before clicking, and treat the email field on any form as the real decision point rather than the submit button.

Sources: Jotform: Explanation of Email Notification and Autoresponder Settings; Jotform: Understanding Form Analytics; Jotform Privacy Policy; Jotform: Email Marketing Integrations; Postmark: Tracking opens; HubSpot: Manage marketing email open and click tracking; AWS: Configuring custom domains to handle open and click tracking; Google: Turn images on or off in Gmail. Jotform documentation and privacy policy were read on 20 September 2026. The Postmark and HubSpot findings come from direct DNS lookups of the SPF, MX, and DKIM records for jotform.com, email.jotform.com, and pm-bounces.jotform.com on the same date. Jotform does not publish a tracking pixel hostname or parameter name for its form notification emails, because no such pixel is documented to exist; nothing in this article should be read as identifying one.