Posteo Read Receipts: Does Posteo Track Your Email?

A Posteo read receipt never leaves your mailbox unless you change a setting or click to send one. That is the short answer, and it comes straight from Posteo's own help center, which says automatic return receipts are "deactivated by default in order to protect your privacy (e.g. against spammers)." Posteo is an independent provider in Berlin's Kreuzberg district, founded in 2009, and funded by more than half a million customer accounts, according to its About Posteo page. It runs on green power from Green Planet Energy, accepts cash, and asks for no name at signup. So does Posteo track your email? We found no feature that reports your reading to senders or to Posteo. We did find two gaps: no image proxy and no protection for tracked links. We read Posteo's English help center, privacy policy, feature list and transparency report on October 14, 2026.

Key Takeaways

• Posteo's help article on return receipts says automatic read confirmations are switched off by default in its webmail, and you can set the option to ask each time or ignore.
• Posteo webmail does not load images from the internet by default, and Posteo warns that turning them on makes "user tracking in the emails" possible.
• Posteo documents no image proxy and no tracking link cleaning, so nothing it describes hides your IP address from a sender once you load images or click a tracked link.
• Posteo's transparency report counts 85 requests from authorities in 2025 and content released from 2 mailboxes, both under a court ordered interception.
• Gmail shows images automatically by default, so Posteo mail forwarded into Gmail loses Posteo's protection unless you change a Gmail setting or add an extension.

What Is a Read Receipt, and How Is It Different From a Tracking Pixel?

A read receipt is a request you can refuse; a tracking pixel is a report that fires without asking. Posteo calls the first a return receipt and notes it is "sometimes also called a message disposition notification (MDN)." The MDN standard, RFC 8098, describes the sender's Disposition-Notification-To header as "merely a request for an MDN" and says recipients' mail programs "are always free to silently ignore such a request."

A tracking pixel works differently. The sender puts a tiny image hosted on its own server into the message. When your mail program fetches that image, the server logs the request, which tells the sender the time of the open and the IP address that asked. No dialog appears. Our explainer on how to block email tracking in Gmail walks through the mechanics. Posteo handles the two threats with two separate settings, and both start in the private position.

Does Posteo Send Read Receipts?

Not automatically, unless you turn that on yourself. The relevant control lives under Settings, Preferences, Mailbox View, in a dropdown labeled On request for return receipt. Across two help articles, Posteo documents four choices:

• ask each time and ignore, the two options Posteo's deactivation guide recommends;
• send receipt and send receipt to my contacts, otherwise ask me, the two options its activation guide describes.

Posteo is blunt about the risk of the automatic options. The activation guide warns that with send receipt, "a return receipt will also potentially be sent to spammers," and adds a privacy tip: "the sender can see whether you have read an email and whether you are actively using your account." Neither article says which of the two private options is the factory setting, only that automatic confirmation is off. If you have never touched the dropdown, open it once and pick ignore if you never want to be asked.

How Do You Request a Read Receipt in Posteo?

You tick a box on the compose screen. According to Posteo's help article on requesting a return receipt, you click the cog icon above the text field and place a tick next to Return receipt. The same page admits the limit: the recipient "can also ignore a request," and a missing receipt "does not, however, mean that the recipient has not received, seen or read your email."

One naming quirk trips people up. That article's title calls the feature "delivery confirmation (return receipt)," but Posteo has a second, unrelated feature with a similar name. A delivery status notification (DSN) only confirms that "the email you sent has been received" by the recipient's server. It arrives with the subject Successful Mail Delivery Report and says nothing about whether a person opened anything. If you want proof of reading, you need the return receipt, and the other side can still say no.

Does Posteo Load Remote Images?

No, not by default. Posteo's image loading help article says the automatic loading of images from the internet "is deactivated in the Posteo webmail interface in order to protect your privacy." The switch sits under Settings, Preferences, Displaying Messages, in a dropdown called Display remote inline images, with three values: never, from known senders, and always.

The matching activation article spells out what you give up by choosing always: "user tracking in the emails becomes possible. Thus the sender can potentially see whether you have read an email and whether you are actively using your email account." Watch the middle value. Posteo's deactivation guide offers from known senders as an alternative to never, but a known sender is anyone you have saved as a contact, including shops and newsletters, and marketing mail is where pixels usually live.

What Posteo Does Not Do: Image Proxies and Link Cleaning

Posteo blocks images wholesale, and that is where its documented protection ends. We found no help article, feature listing or privacy policy passage describing an image proxy, a tracker blocklist, or the removal of tracking parameters from links. Compare Proton, whose tracker protection page says it removes known trackers, will "pre-load other remote images on your behalf using a proxy with a generic IP address," and strips UTM and other tracking parameters from links on the web app.

In practice this means two things for Posteo users:

• Loading images is all or nothing. Without a proxy, choosing to show images in a message means your browser requests each one from the sender's server, pixel included, and that server can log your IP address and the time.
• Links are left as they arrive. A newsletter that wraps every link in a redirect still counts your click, even with images blocked.

There is also a software angle for technical readers. Posteo has published plugins for the open source Roundcube webmail on its GitHub account, and the setting names in its help pages, such as Display remote inline images and On request for return receipt, match the labels in Roundcube's English language file. Image blocking in Roundcube has had holes: the project's February 8, 2026 security release lists a "remote image blocking bypass via SVG content." We could not verify which Roundcube version Posteo runs today, so we cannot say whether Posteo was ever exposed. The lesson is general: a blocking setting is code, and code needs patching.

Does Posteo Track You Itself?

Posteo says no, and what we could check supports it. The Posteo privacy policy states that its "website and webmailer are ad-free and tracking-free" and that it does not use Google Analytics or third party captchas. The specifics are unusually concrete:

• No customer IP addresses. Posteo says it does "not collect and save any IP addresses that could be traced back to customers," including over IMAP, POP3 and SMTP, and that an audit report by the German Federal Commissioner for Data Protection confirmed this.
• No IP in your outgoing mail. The feature list says messages sent from webmail or a mail program "contain neither your local nor your public IP address."
• No marketing mail. The feature list says: "We send you no advertising emails or advertising newsletters whatsoever." That answers the question of whether Posteo pixels its own newsletter. It does not have one.
• No third party scripts. All 16 scripts referenced in the HTML of the posteo.de English homepage we downloaded point to Posteo's own domain.

The contrast with other German providers is sharp. Our WEB.DE read receipts review found that free WEB.DE users cannot unsubscribe from a weekly company newsletter that WEB.DE measures with open rates when users have consented. Posteo sends no such mail at all, so there is no first party open rate to measure.

What Does Posteo's Transparency Report Show?

Posteo received 85 requests from authorities in 2025 and released content from 2 mailboxes. The Posteo transparency report, first published in May 2014, breaks the 2025 figures down as follows:

• 79 requests came from German authorities and 6 from foreign ones; 81 came from law enforcement and 4 from intelligence services.
• 72 were requests for user information, 4 were mailbox seizures, 2 were interception orders (TKÜ), and 7 were unclear.
• Posteo released user information 0 times, citing "data not available / anonymous signup," and traffic data 0 times, because IP addresses are "not available."
• Content from 2 mailboxes was released, both under interception orders. None of the 4 seizure orders were carried out: three named mailboxes that did not exist, and one hit an account with encrypted mail storage switched on.
• Posteo filed 27 complaints with state privacy officers over illegal or insecure transmission of requests.

Some context makes these numbers easier to read. Two mailboxes out of more than half a million accounts is fewer than one in 250,000. Content releases also fell from 10 mailboxes in 2024 to 2 in 2025, even as user information requests rose from 61 to 72. heise online counted 35 of the 85 requests in 2025 as formally incorrect, about 41 percent. Compare Belgium's Mailfence: our Mailfence read receipts review notes it identified users in 9 of 21 cases in the second half of 2025. Posteo cannot identify anyone this way because it never collected names. What it can hand over under a valid order is mail content, unless you use its encrypted storage. One oddity: an introductory sentence on the report still says it covers requests "until the end of December 2022," although the page lists figures for 2023, 2024 and 2025.

How to Block Read Receipts and Trackers in Posteo

Posteo's defaults already do most of the work. These steps, built from its help center, close the remaining gaps:

1. Set return receipts to ignore. Settings, Preferences, Mailbox View, On request for return receipt. Avoid both send receipt options.
2. Set remote images to never. Settings, Preferences, Displaying Messages, Display remote inline images. Never is stricter than from known senders.
3. Treat the load images button as a read receipt. Clicking it on a marketing email confirms your open to whoever hosts the images.
4. Hover before you click. Posteo does not rewrite tracked links, so check where a link really points.
5. Turn on encrypted mail storage. In the 2025 report, one seizure order went nowhere because crypto mail storage was active on that account.
6. Pick a desktop program that blocks remote content. Posteo's mail program setup guide lists IMAP on posteo.de, port 993, and notes Thunderbird configures itself automatically. Your mail program's image settings apply there, not Posteo's.

For journalists and activists, step 3 matters most. Posteo strips your IP from the mail you send, but it cannot hide your IP from an image server once you load its images. On an unexpected message from an unknown sender, keep images blocked.

Posteo vs Proton, Tuta, Mailfence and HEY

Posteo sits in the block everything group, alongside Tuta and Mailfence. Here is how the five compare on open tracking, based on each provider's own documentation and our earlier reviews:

• Posteo: remote images off by default, automatic read receipts off, no documented proxy or link cleaning.
• Tuta: blocks external content by default and, as our Tuta read receipts review found, has no image proxy and does not clean tracking links.
• Mailfence: hides external images until you click Yes and asks before sending a read receipt, with no proxy or link cleaning.
• Proton: removes known trackers, proxies remaining images and strips tracking parameters from links on the web.
• HEY: its spy tracker page says it "strips spy trackers from every email" and "routes all images through our own servers first, so your IP address never leaks."

Blocking everything is the safer default for anyone who rarely needs images. Proxying is more convenient, because you can view a newsletter without exposing your IP, but it relies on the provider's tracker list being current.

Why Email Users Should Care: Reading Posteo Mail in Gmail

Posteo's protection only applies where you read the mail. Posteo's forwarding guide lets you forward to up to five addresses while keeping a copy in Posteo. Once a copy lands in Gmail, Gmail's rules apply. Google's image settings page says: "By default, when you get an email with an image, you'll see the image automatically," and admits that "senders may know whether you've opened an email that has an image." Pulling mail into Gmail over POP is also ending: Google's POP fetching notice says existing users keep the feature only until January 2027.

If Gmail is where you read, you have three realistic options:

• Gmail's own setting: Settings, See all settings, Images, then Ask before displaying external images. It mirrors Posteo's never option and hides wanted images too.
• Gblock: a paid Chrome extension for Gmail on desktop browsers, with a 30 day trial. It blocks known tracking pixels using a blocklist that updates automatically, strips tracking from links and leaves other images alone. To be clear, Gblock works only inside Gmail. It does nothing in Posteo's webmail, its web app or a desktop program connected to Posteo.
• Ugly Email, PixelBlock and Trocker: other Gmail extensions that target the same pixels, with different trade offs.

The Quick Answer

Does Posteo send read receipts? Only if you switch on automatic receipts or answer a request yourself; Posteo says automatic confirmation is off by default. Does Posteo track you? We found no evidence that it does. It blocks remote images by default, keeps no customer IP addresses, removes your IP from outgoing mail and sends no marketing newsletters. Its gaps are a missing image proxy and no tracked link cleaning, so the moment you load images or click a link, the sender learns you were there. In 2025 it released content from 2 mailboxes under court ordered interception, out of 85 requests.