Is Salesforce Tracking Your Email? How to Block It

The moment you open an email sent through Salesforce Marketing Cloud or Pardot — whether it is a sales outreach, a product announcement, or a follow up from a company you gave your business card to two years ago — a transparent 1×1 pixel fires silently from Salesforce's servers. That single image request delivers your IP address, device type, operating system, email client, and an exact timestamp to the sender's Salesforce account before you have finished reading the subject line. Salesforce is the world's largest CRM platform, used by over 150,000 businesses globally. Its email marketing infrastructure reaches hundreds of millions of inboxes every day, making Salesforce email tracking one of the most pervasive forms of invisible surveillance in professional communication.

Key Takeaways

• Salesforce Marketing Cloud (formerly ExactTarget) and Pardot both track email opens via invisible 1×1 pixels and log click events through link redirection.
• Tracking data collected includes your IP address, device type, email client, operating system, and precise open time — all stored in the sender's Salesforce CRM record for you.
• Salesforce Engage pushes real time open alerts to sales reps within seconds of you opening a message, enabling precisely timed follow up calls.
• Italy's Garante issued Provision No. 284 in April 2026 explicitly requiring prior consent for email open tracking pixels — the first EU authority to issue a specific ruling on this practice.
• Gblock blocks Salesforce Marketing Cloud and Pardot tracking pixels in Gmail before the open event ever reaches Salesforce servers.

What Is Salesforce Marketing Cloud?

Salesforce Marketing Cloud (SFMC), formerly known as ExactTarget before Salesforce acquired it in 2013 for $2.5 billion, is the enterprise email and marketing automation platform embedded in Salesforce's product suite. Used by brands including Amazon, Uber, Ticketmaster, and thousands of mid market businesses, SFMC sends billions of marketing and transactional emails annually. On the B2B side, Pardot — now rebranded as Marketing Cloud Account Engagement — handles marketing automation for companies that want tight integration with Salesforce's CRM, syncing email engagement data directly to sales contact records.

The critical difference between Salesforce email tools and a basic newsletter service is depth of integration. SFMC and Pardot do not merely track whether you opened an email. They feed that open event into a connected CRM record, increment lead scores, trigger automated workflows, and send real time notifications to sales reps. Every behavioral signal is turned into actionable intelligence for the sender.

How Does Salesforce Track Email Opens?

Both Salesforce Marketing Cloud and Pardot use the standard tracking pixel mechanism. When either platform sends an email on behalf of a customer, it injects a hidden <img> tag into the HTML. This image is a single pixel, transparent, and styled to be invisible. When your email client loads the message and fetches that image URL, the request hits Salesforce's servers and the open event is recorded.

Salesforce Marketing Cloud tracking domains include:

• et-track.com — Salesforce Marketing Cloud's primary open tracking subdomain (e.g., [accountid].et-track.com)
• click.em.exacttarget.com — click tracking redirects used by SFMC customers (legacy ExactTarget domain)
• click.salesforce.com — newer Salesforce click tracking domain
• Branded CNAMEs — many large Salesforce customers configure a CNAME so the tracking domain appears as email.companyname.com or click.companyname.com, masking the Salesforce origin

Pardot uses its own tracking infrastructure:

• pi.pardot.com — Pardot's web and email tracking domain
• go.pardot.com — Pardot link click redirect domain
• pages.pardot.com — Pardot landing page and tracking domain
• Company CNAMEs — Pardot customers commonly configure custom domains like info.companyname.com or go.companyname.com

Click tracking works on top of open tracking. Every hyperlink in a Salesforce Marketing Cloud or Pardot email is rewritten to redirect through a Salesforce tracking URL before reaching the destination. When you click, Salesforce logs the event — which link, at what time, from which device — then redirects you onward, all in under a second. For a detailed breakdown of how open and click tracking differ technically, see email open tracking vs click tracking explained.

What Does Salesforce Collect When You Open an Email?

According to Salesforce Marketing Cloud's tracking documentation, every open event logs the following data to the sender's Salesforce account:

• Timestamp — exact date and time of the open
• IP address — used to infer city, region, and country of the recipient
• Email client — Gmail, Outlook, Apple Mail, and dozens more
• Operating system — Windows, macOS, iOS, Android
• Device type — desktop, mobile, or tablet
• Number of opens — Salesforce tracks repeated opens of the same email against the same contact record

For click events, Salesforce additionally logs which specific link you clicked, the time of the click, and the device used. Pardot's Engage Alerts feature goes further: when a tracked contact opens a Pardot email, a real time desktop or mobile notification is pushed to the assigned sales rep within seconds. The notification includes your name, the email subject, and the exact time of your open — so the sales rep can call you immediately while the email is still in front of you.

Pardot also extends tracking beyond the inbox. Once you click a link in a Pardot email and land on any page that has Pardot's tracking JavaScript installed, your browsing behavior on that domain is also logged against your contact record — which pages you visited, how long you spent on each, and whether you returned later via direct navigation. The email open is just the entry point into a larger behavioral profile.

How to Identify a Salesforce Email in Gmail

To check whether an email was sent through Salesforce Marketing Cloud or Pardot, inspect the raw message source. In Gmail, open the email, click the three dot menu in the top right corner of the message, and select "Show original." Search the HTML source for these fingerprints:

• et-track.com or exacttarget.com in any src attribute — the SFMC open tracking pixel
• click.em.exacttarget.com or click.salesforce.com in any link — SFMC click tracking wrapper
• pi.pardot.com or go.pardot.com — Pardot tracking domains
• Email headers with X-SFMC- prefixed fields — Salesforce Marketing Cloud header signatures
• sfmc-content.com or s[number].exacttarget.com in image sources — SFMC content hosting domains

When Salesforce customers use branded CNAMEs, none of these canonical domains will be visible. In that case, look for links that redirect through an unfamiliar subdomain of the sender's domain before arriving at the final URL, or look for long encoded parameters like /l/[encodeddata] in link paths — the structure Salesforce and Pardot use for click tracking. For a broader guide to spotting email trackers across all platforms, see our email tracker for Gmail overview.

Does Salesforce Email Tracking Comply With GDPR?

Whether Salesforce email tracking is GDPR compliant depends on who sent the email, not on Salesforce itself. Salesforce is the data processor; the company that sent you the email is the data controller. That company bears full responsibility for having a lawful basis under GDPR for the personal data — your IP address, device data — captured by the tracking pixel.

The legal breakdown by jurisdiction:

• GDPR (EU/EEA) — IP addresses are personal data under EU law. Processing requires a lawful basis. Legitimate interest can apply to some B2B email, but behavioral profiling via tracking pixels is harder to justify without explicit consent or a documented balancing test. Italy's Garante issued Provision No. 284 in April 2026 explicitly requiring prior consent for tracking pixels in marketing emails sent to Italian recipients — the first EU authority to issue a specific ruling on email open tracking pixels.
• CASL (Canada) — requires express or implied consent for commercial electronic messages and for the behavioral tracking within them, for recipients in Canada.
• CAN-SPAM (United States) — does not require consent for open or click tracking. US recipients have no federal right to opt out of tracking pixels in marketing email.

Salesforce provides GDPR tooling within both Marketing Cloud and Pardot — data subject request workflows, consent fields, suppression lists. Tracking is enabled by default and these compliance features only activate if the Salesforce customer configures them. As a recipient, you have no visibility into whether the company that sent you a Salesforce email has a lawful basis for the data their tracking pixel just collected.

Why Email Users Should Care

Most people assume email is a one way communication. Salesforce's tracking architecture reverses this entirely. The moment you open a Salesforce Marketing Cloud or Pardot email, you are broadcasting behavioral data back to the sender's CRM: your location derived from your IP address, what device you use, what time you check email, and whether you found the subject line compelling enough to open.

The scale matters here. Because Salesforce CRM dominates enterprise sales teams, a large proportion of the cold outreach, follow up emails, and vendor communications you receive in a professional Gmail account likely run through either SFMC or Pardot. Every open you register across those emails contributes to behavioral profiles held in dozens of separate Salesforce instances, owned by dozens of companies you may never have knowingly engaged with.

Engage Alerts creates a particularly acute privacy concern. When a sales rep receives an instant notification the moment you open their email, it transforms the follow up call from a cold outreach into a psychologically timed intervention — calibrated to reach you while the message is still in front of you. You did not consent to being tracked in real time. The sales rep's ability to time a call with precision depends entirely on your involuntary disclosure of your attention and approximate location.

How to Block Salesforce Email Tracking

Three practical approaches, ordered by effectiveness:

1. Use Gblock (most effective)

Get Gblock for Gmail — a Chrome extension built specifically to block tracking pixels and click tracking redirects in Gmail. Gblock intercepts requests to Salesforce Marketing Cloud domains (et-track.com, click.em.exacttarget.com, click.salesforce.com) and Pardot domains (pi.pardot.com, go.pardot.com) before they fire. No open timestamp. No IP address. No Engage Alert to the sales rep. For click tracking, Gblock flags tracked links before you click so you can see that your action will be logged. It is the only approach that blocks both open and click tracking without degrading your Gmail experience.

2. Turn off automatic image loading in Gmail (partial)

In Gmail Settings → General → Images, select "Ask before displaying external images." This prevents the pixel from firing on open. The cost: every email renders without images until you manually approve them, and this does nothing for click tracking — clicking any link in a Salesforce email still routes through Salesforce servers and logs the event.

3. Use a privacy respecting email client (nuclear option)

Switching to a client that blocks remote content by default — such as Apple Mail with Mail Privacy Protection enabled, or Proton Mail — prevents the tracking pixel from firing. This approach works but requires leaving Gmail entirely and does not protect you from click tracking when you follow links.

For a full comparison of tools that block email tracking in Gmail, see how to block email tracking in Gmail.

Does Salesforce Know When You Block Their Tracking?

When you block the Salesforce tracking pixel, the open event never fires. Salesforce records the email as undelivered or simply sees no engagement. Most Salesforce CRM users treat "no open" as a signal of low intent: your lead score stays flat or declines over time, and automated nurture sequences may eventually stop emailing you after a set number of unanswered messages.

For privacy advocates, this is a calculated trade. You stop feeding Salesforce's behavioral scoring engine, and in exchange the sender does not know you have read their message, does not know you are online, and cannot time a follow up call to your open. The sales cadence continues, but it operates blind. Most privacy focused users consider that the correct exchange.

Stop Salesforce Before It Logs Your First Open

Salesforce Marketing Cloud and Pardot tracking is enabled by default on every email every Salesforce customer sends. The recipient bears all the burden of discovery and protection. Turning off images in Gmail helps with open tracking at the margins but leaves click tracking fully intact, and the website behavioral tracking Pardot enables after a click continues regardless of your image settings.

The most practical fix is blocking at the source before any pixel fires. Gblock runs silently in the background so you read your Gmail normally while Salesforce's tracking infrastructure receives nothing. No open timestamp. No IP address. No Engage Alert firing on the sales rep's phone. No data sent to et-track.com or pi.pardot.com.

Sources: Salesforce: Tracking in Email Studio | Salesforce: Pardot Open Tracking | Email Uplers: Email Tracking in SFMC.