Is Qwilr Tracking Your Email? How to Block It in 2026

A vendor emails you a link instead of a PDF. You open it, scroll to the pricing, play with the ROI calculator, and close the tab. Qwilr tracking has already logged the visit: the time, the duration, your country, your browser, and a block by block breakdown of what you read. By default the sender gets an email the moment you first open it. Qwilr says it is used by more than 5,000 customers (Qwilr analytics product page), so if you buy software, agency work or services, you have probably been on the receiving end.

Key Takeaways

• Qwilr's help center states that by default the sender is emailed "the first time your buyer views your Qwilr Page," and senders can switch that to every view or a custom number of views.
• Qwilr Analytics records each viewer's location, device and browser, visit duration, and "a detailed breakdown of the time spent on various blocks within the document," plus outbound link clicks, accordion opens, quote changes and ROI calculator edits.
• Qwilr's notifications go to the sender, not to you, and its sharing docs describe copying a public link into your own message, so the email that delivers a Qwilr link is usually tracked (or not) by whatever tool the salesperson sent it from.
• An email tracker blocker can stop open pixels and tracked redirects in the delivering email, but nothing in your inbox can stop the analytics that run on the Qwilr page once you click.
• Qwilr's security page says customer data "is stored and processed in Sydney, Australia," and that Qwilr provides a Data Processing Addendum to customers for GDPR purposes, which makes the sender the party you ask about your data.

What Is Qwilr?

Qwilr is an Australian proposal and quote platform that turns sales documents into interactive, hosted web pages instead of attachments.

Sales teams use it to build proposals with embedded video, pricing tables a buyer can adjust, ROI calculators and an accept button. The pitch to senders is explicit: Qwilr's product page promises "instant notifications when your quotes and proposals are viewed, signed" and invites them to "identify hidden buyers by monitoring who is viewing" their proposals. The format is close to PandaDoc and DocSend, which we covered in our PandaDoc tracking breakdown and our look at DocSend's page analytics. The difference is that a Qwilr proposal was never a document to begin with. Everything you do on it is a web interaction, and web interactions are easy to log.

What Does Qwilr Track When You Open a Proposal?

Qwilr tracks every visit to the page and a detailed record of what you did there, per viewer. According to Qwilr's Analytics help article, the sender's dashboard shows:

• When and how long. "The date and time they viewed the page," the duration of the visit, and a view count that updates "each time a buyer views the Page."
• Where you were. "The location of each viewer," filterable by country.
• What you used. "The device and browser they're using," shown as Android or iOS on mobile and Apple or Windows on desktop.
• What you read. "Block visibility," meaning which sections of the page actually scrolled onto your screen, and time spent per block.
• What you touched. Which blocks you unfolded, whether you opened accordions, outbound link clicks, ROI calculator changes and quote changes.
• Who you are, if gated. On plans with identity verification, the page can ask for a name and email before it opens, and the help article notes the sender can then visit your LinkedIn page.

Put those together and the sender knows that someone in Berlin on an iPhone opened the proposal at 10:40pm, skipped the case studies, spent most of the visit on pricing and dragged the ROI slider down. That is a negotiating advantage, and you gave it away by scrolling.

Does Qwilr Know When You Forward a Proposal?

Qwilr does not document a forwarding detector, but forwarding shows up anyway because every new person who opens the link becomes a new viewer.

Qwilr's marketing says senders are alerted when a buyer has "shared it with other buyers," and its viewer identification announcement sells name and email gating as the fix for when "someone shares your page without telling you." We found no help article describing a mechanism beyond that. The practical reading: if you forward the link to your CFO, a second viewer appears with a different location and device. With identification switched on, it appears with their name. Your internal buying committee becomes visible to the vendor.

Does the Email Itself Track You?

Usually the email that delivers a Qwilr link is not sent by Qwilr at all, so whether it tracks you depends on the sender's email tool.

This is the part most people get wrong. Qwilr's notifications documentation says view and acceptance notifications go to the page creator: "This notification only goes to the creator of the Page." Its sharing guide describes setting the page live, copying the public link, and pasting it into "any message you're sending to your client." Unlike PandaDoc or DocuSign, there is no branded Qwilr invitation email that we could document landing in your inbox.

So two surfaces exist, and they are owned by different software:

• The delivering email. Often sent from Gmail or Outlook with a sales extension, or from a sequence tool like HubSpot, Outreach or Salesloft. Those add an open pixel and wrap links in a redirect. Our guide to HubSpot email tracking shows what that layer records, and how link wrapping works explains why the click is logged before Qwilr ever loads.
• The Qwilr page. First party analytics running in your browser on Qwilr's site, logging everything listed above.

One telling detail from Qwilr's own docs: notifications can fire when no human looked at all, triggered by "preview services used by Microsoft, Outlook, or antivirus scanners." Link scanners fetch the URL, and Qwilr counts it as a view. Qwilr's suggested workaround is to hide the link behind a button or phrase. That tells you the tracking starts on the very first fetch of the URL, from anyone or anything.

Is Qwilr Tracking Legal Under GDPR?

Qwilr says it is GDPR compliant and acts on behalf of its customers, which places responsibility for proposal analytics mostly on the business that sent you the link.

Qwilr's privacy and security page, last reviewed on 10 September 2026, says "Qwilr is compliant with GDPR requirements," that it can provide a Data Processing Addendum "to support customers with their GDPR obligations," and that customer data is stored and processed in Sydney on AWS. What it does not spell out is what is collected about recipients, which cookies the viewer sets, or how recipients exercise their rights.

For compliance teams, the interesting part is the gap between the two records. Acceptance evidence on a signed quote has a legitimate legal job under the EU's eIDAS Regulation. Block level reading time, location and device do not. Under Article 5(3) of the ePrivacy Directive, reading information from a user's device generally needs consent unless it is strictly necessary for the service the user asked for. Whether scroll and dwell telemetry on a proposal page meets that bar has not, as far as we found, been tested by a regulator. If you sell into the EU with Qwilr, treat the analytics as something to disclose. If you receive a Qwilr page, you can send the sender a subject access request for what their dashboard holds about you.

How to Block Qwilr Tracking

You can fully block the email layer and reduce what the page layer learns, but you cannot open a hosted Qwilr page without the sender seeing a view.

• Stop automatic image loading. In Gmail, go to Settings, See all settings, and under Images choose Ask before displaying external images. Limit: covers pixels in the delivering email, nothing on the Qwilr page.
• Use a tracker blocker in Gmail. It removes pixels and unwraps tracked redirects around the Qwilr link. Limit: the same boundary. Clicking through is still a visit.
• Ask for a PDF. Qwilr's help center lists PDF download and sharing as a feature. A PDF in your inbox reports no block timings. Limit: the sender may still want you to accept on the page.
• Read once, decide offline. Every revisit increments the view count and can trigger a fresh alert. Take notes or a screenshot on the first pass. Limit: behavioural, not technical.
• Think before forwarding. Each colleague you send the link to becomes a visible viewer with their own location and device. Share your own summary instead. Limit: others may need the original to approve.
• Leave the interactive parts alone. ROI calculator edits, quote changes, accordion opens and outbound clicks are all logged. Limit: you lose some of the page's usefulness.
• Use a VPN if location matters. It changes the location the dashboard shows. Limit: it does nothing about timing, device or the fact of the visit.

For a full rundown of inbox side options, see our guide to blocking email tracking in Gmail.

Which Email Blocker Covers the Inbox Side?

Several tools block the email layer around a Qwilr link, and none of them blocks Qwilr's page analytics.

• Ugly Email marks tracked messages with an eye icon, so it leans toward detection.
• PixelBlock blocks open pixels in Gmail but leaves tracked links as they are.
• Trocker works across several webmail services and flags pixels and tracked links.
• Proton Mail loads remote images through a proxy, and HEY strips known spy pixels. Both require moving your email to a new provider.
• Gblock runs inside Gmail, blocks spy pixels, strips tracking links, and updates its blocklist automatically, so you keep your address and your inbox.

Our comparison of the best email tracker blocker extensions covers the tradeoffs. Be wary of any product that claims it can make a Qwilr view invisible while still showing you the proposal. The page is the tracker, so the only way not to be measured by it is not to load it. The same split applies to DocuSign envelopes and their signing records.

Proposify goes further and asks for your email before the proposal opens; see how Proposify email tracking works.