Is PandaDoc Tracking You? How to Block Its Pixels

A quote, a contract or a proposal arrives as a link rather than an attachment. You click it, read page three twice because the pricing table is confusing, and close the tab. PandaDoc tracking has already turned that into a chart on the sender's screen: total time, time per page, view count, whether you downloaded a copy, whether you clicked anything inside. The company crossed 50,000 customers and $100 million in annual recurring revenue in 2024 (PandaDoc press release, August 2024), so the odds a contract in your inbox runs through it are not small.

Key Takeaways

• PandaDoc's Document Analytics reports the percentage and duration of time a recipient spent on every individual page, plus view counts, last view time, PDF downloads and link clicks.
• PandaDoc's own documentation states that analytics "stop tracking 30 seconds after recipient is not on the document," which means the viewer is running client side code that watches whether its tab is in front of you.
• Senders can enable a notification that fires when a document is "opened by a recipient every time," so a fourth visit to a contract at 11pm is a live alert on somebody's phone.
• Blocking images in your mail client stops open pixels in the surrounding email, but it does not stop the analytics that run inside the document viewer once you click the link.
• Part of what PandaDoc records exists for evidentiary reasons under ESIGN, UETA and eIDAS, and the completion certificate on a signed document is not something you can opt out of and still have a valid signature.

What Is PandaDoc and Who Is Sending You Documents Through It?

PandaDoc is a document automation and e-signature platform: the tool a sales team uses to build a proposal, send it, and get it signed without attaching a PDF to anything.

The senders are account executives, agencies, recruiters, landlords and procurement teams. What separates it from a plain e-signature service is the analytics layer bolted on for the sales use case. The sender is not only waiting for a signature. They are watching how you read the thing first, then timing the follow up call around it.

If that shape sounds familiar, we took apart the same architecture in our breakdown of what DocSend records when you open a pitch deck. PandaDoc's twist is that the document you are measured on is usually one you are expected to sign, which drags legal obligations into a conversation that would otherwise be purely about surveillance.

What Does PandaDoc Track?

Reading behaviour at page level, not just that you opened something. PandaDoc's Document Analytics documentation describes what lands on the sender's dashboard:

• Time per page. The docs describe a "percentage of time spent for this page (takes seconds into consideration)" alongside a duration and a per page view count.
• Total time and view count. How long you spent in the document overall and how many separate times you came back to it.
• Downloads. Whether you saved a PDF copy.
• Link clicks. Whether you followed any link embedded in the document.
• IP address and location on completion. PandaDoc's certificate of completion for a signed document records the signer's verified email, IP address and timestamp as evidence of who signed and when.

Worth being precise, because most coverage is not: the analytics dashboard and the signing certificate are different records serving different purposes. The support documentation for the analytics view describes viewing behaviour, and lists the feature as available on Business and Enterprise plans. IP address and location sit with the signature certificate. Treating them as one blob of "PandaDoc knows everything" makes it harder to reason about what you can change.

Does PandaDoc Track When You Open the Email?

The events PandaDoc documents for senders are document events, not email open events, and that difference decides which of your defences work.

PandaDoc's notification settings documentation lists the triggers a sender can switch on: opened for the first time, opened every time, completed by a recipient, completed by all recipients, comment posted. All fire at the document, after your click. None is described as an email open receipt.

That does not mean the email is inert. Two caveats, and where a mechanism is inferred rather than documented we say so:

• The notification email carries remote images. A PandaDoc invitation is branded HTML with hosted images. Any remote image your client fetches reveals your IP address, approximate location and user agent to whoever hosts it. Whether that surfaces to the sender as an open receipt is not something PandaDoc's public docs claim, so we are not claiming it either.
• The link is often not sent by PandaDoc at all. Reps paste PandaDoc links into sequences sent from Outreach, Salesloft or HubSpot. Those emails do carry an open pixel and a rewritten click URL, and our guide to how link wrapping turns every URL into a tracker explains what that layer logs before PandaDoc ever sees you.

How Does the Page Level Timing Actually Work?

By running code in your browser that watches whether the document tab is the one in front of you, and reporting back while it is.

The evidence is in PandaDoc's own wording: analytics "stop tracking 30 seconds after recipient is not on the document." A server that only knew a page had been requested could never say that. Deciding you are no longer on the document requires something client side observing tab focus, and periodic signals so the timer can be reconstructed. Browsers expose exactly that through the Page Visibility API, standardised by the W3C, which is the ordinary way any web application measures attention. We have not decompiled the viewer, so treat the implementation as inference; the 30 second window is documented fact.

Three mechanisms, then, and they fail differently when you block them:

• Remote images in email are passive. Refuse the request and the event never happens, which is why a blocker kills this layer cleanly. Our walkthrough on spotting tracking pixels in Gmail message source shows what they look like up close.
• Viewer telemetry is active and first party. It is the same code that renders the document you asked for, so no email extension can strip it without removing the document.
• Link clicks inside the document are logged by the host page before the redirect, so a click recorded there never touches your mail client at all.

Why Does the Audit Trail Exist in the First Place?

Because an electronic signature is only worth anything if you can later prove who made it, when, and that the document has not changed since.

Under the US ESIGN Act of 2000 and the state level UETA framework, an electronic record satisfies a signature requirement when it is attributable to a person and accurately retained. The EU's eIDAS Regulation (910/2014) goes further, grading signatures by how strongly the signatory is identified and whether later changes to the data are detectable. Timestamps, verified email addresses and IP records are how a platform meets that bar.

There is a real line here, and compliance teams should draw it clearly. The signing evidence is a legitimate legal artefact you cannot opt out of without giving up the enforceability of your own signature. The attention analytics are a sales feature, serve no evidentiary function, and run without being announced. Both arrive in one product and get defended with the same argument, which is the part worth pushing back on.

For anyone in a GDPR jurisdiction, the controller for the reading analytics is not PandaDoc. It is the company that sent you the document and chose to leave that feature on. That is who you ask for a copy of what was recorded.

How to Block PandaDoc Tracking

You can shut the email layer down completely and shrink the document layer close to noise, but you cannot read a hosted document invisibly. What each step buys you:

• Turn off automatic image loading. In Gmail, open Settings, See all settings, and under Images choose Ask before displaying external images. Outlook has an equivalent setting. Limit: this kills open pixels in the covering email and does nothing to the document viewer.
• Run a pixel and link blocker in Gmail. It handles the sales platform layer around the PandaDoc link automatically. Limit: same boundary. It stops what arrives in your inbox, not what runs on pandadoc.com.
• Ask for a PDF copy when you only need to review. The most effective move here, and almost nobody makes it. A PDF in your inbox generates no page timings, no revisit counts, no dwell chart. Limit: it does not cover signing, and some senders will decline because the analytics are why they used PandaDoc.
• Open the link in a private window or a container tab. No carried over cookies makes repeat visits harder to stitch into one profile. Limit: the visit still registers, and a link addressed to you personally carries your identity regardless of cookies.
• Read it in one pass, decide offline. Close the tab and the analytics stop 30 seconds later. Reopening a contract five times over two days is a louder signal about your interest than the reading itself. Limit: behavioural, not technical.
• Do not click links inside the document. Those clicks are logged; search for the destination separately instead. Limit: mildly annoying, entirely effective.

Not on this list: any tool claiming to make a PandaDoc view disappear while still showing you the document. That is not a gap in the market, it is a contradiction, and our broader guide to blocking email tracking in Gmail is honest about where the boundary sits.

Which Blocker Should You Use for the Email Layer?

Several tools cover it, they differ in scope, and none touches document analytics.

• Ugly Email flags tracked messages with an eye icon before you open them, which is detection first rather than blocking first.
• PixelBlock blocks open pixels in Gmail but leaves rewritten click URLs alone.
• Trocker works across several webmail providers and marks where the pixel sits.
• Proton Mail proxies remote images so the sender sees Proton rather than your IP, and HEY strips known trackers and reports them in a screener. Both mean moving your mail.
• Gblock runs inside Gmail so you keep your address and client, updates its blocklist automatically so new tracker domains are covered without you maintaining a list, and strips tracking links as well as pixels.

Our side by side of the best email tracker blocker extensions goes deeper on the tradeoffs. The claim none of these can make, Gblock included, is the one you might most want: open a PandaDoc document and the sender sees the visit and the page timings. An email blocker governs your inbox. It has no authority over a website you chose to visit, and any product suggesting otherwise is selling a feeling rather than a defence.