Is Zoom Tracking Your Email? How to Block It

Ask whether Zoom watches your inbox and you get two answers that are both true. Zoom's webinar and event email dashboards do not report a single open, to anyone. Zoom the company still operates click.zoom.us, a live Salesforce Pardot tracker domain whose only job is logging opens and clicks. So if you want to block email tracking on anything carrying a Zoom logo, the question is not "does Zoom track email opens" but which of Zoom's mail pipelines sent the message in your inbox. Here is what Zoom documents, and what nobody documents at all.

Key Takeaways

• Zoom's Emails tab for webinars and events reports five columns — email name, recipient, trigger, total emails sent, and status — with no open rate or click rate anywhere.
• click.zoom.us resolves by CNAME to go.pardot.com and returns an X-Pardot-Route header, confirming Zoom's own marketing mail runs on Salesforce Account Engagement, which does log opens and clicks.
• Zoom's webinar tracking pixel is a Meta pixel placed on the registration page, not inside any email message.
• Zoom Events pushes registration and attendance data to Marketo in real time, so tracking on a webinar follow up usually belongs to the host's marketing platform, not to Zoom.
• Zoom removed in meeting attendee attention tracking on April 2, 2020, and it never applied to email.

Does Zoom Track When You Open Its Emails?

It depends entirely on which Zoom sent it, and the split is cleaner than you would expect. Zoom's event and webinar products document no open tracking at all. Zoom's corporate marketing department runs a commercial marketing automation stack that does.

Start with the product side, because that is the mail most people receive. Zoom's support article on managing the multi-session Emails tab and its companion on the Zoom Webinars Plus Emails tab describe the same five columns a host sees for every campaign: "Email name and content", "Recipient", "Trigger", "Total emails sent", and "Status". Drill into an individual send and the per person history adds name, email address, "Sent status" (Scheduled, Pending, Delivered, Fail, or Missed schedule), and the actual time sent.

Read that list again and notice what is missing. No opens column, no open rate, no clicks, no device, no location. "Delivered" means a receiving mail server accepted the message; it says nothing about whether you looked at it. A webinar host who wants to know if you read the reminder cannot find out from Zoom's reporting.

Which Zoom Emails Actually Carry Tracking?

Four kinds of mail arrive with Zoom's name on them, and only two are instrumented. Telling them apart is the whole skill.

The third row is where the real answer lives, and it is verifiable in about ten seconds. A DNS lookup on click.zoom.us returns a CNAME to go.pardot.com, which resolves onward to app-ue1-public.fe.pardot.com. Request the host directly and it answers with a 302 redirect, a pardot cookie, and an X-Pardot-Route header. That is a textbook Salesforce Account Engagement tracker domain, and tracker domains exist for two purposes: serving the open pixel, and rewriting every link so the platform logs the click before passing you along. click.zoom.com resolves to the same infrastructure. Our breakdown of how Pardot tracking works covers what that stack records per recipient.

Zoom's outbound mail is also more crowded than one vendor. The SPF record for zoom.us authorizes five distinct sending platforms: Salesforce, Amazon SES, Google, Mailchimp, and Proofpoint. Separately, e.zoom.us points at 13.111.67.8, inside Salesforce's 13.108.0.0/14 block. Five authorized senders under one domain is why "does Zoom track email opens" has no single answer.

What Does a Zoom Webinar Host See About You?

Considerably more than an open rate would tell them, and almost all of it is collected before the first email reaches you. This is the part that gets missed while everyone argues about pixels.

Zoom's documentation on creating webinar registration tracking links describes up to 50 unique registration URLs, each labelled with a source name like Facebook or Email Blast. The host sees visitors and registrations per link, then exports a CSV containing your first name, last name, email address, registration time, approval status, which link you used to register, and every custom question you answered. That link field reveals which channel delivered you, attribution most people never realise they hand over.

The one webinar tracking pixel Zoom does document has a misleading name. Zoom's article on enabling or disabling the webinar tracking pixel describes a Meta pixel placed on the registration page to measure how many users visit the page and complete registration. It sits on a web page. It is not in your email.

Then the data leaves Zoom entirely. Per Zoom's guide to using Marketo for Zoom Events, registration data flows to Marketo in real time, attendance data follows when a session completes, and organizers can optionally push an engagement object containing time spent in session, questions asked, and survey responses. Once your address lands there, the follow up you receive is a Marketo email with Marketo's pixel and Marketo's link rewriting. Zoom never tracked your open. It handed your address to a platform that does. The same pattern appears on every registration product we have examined, including Eventbrite's ticketing emails.

What About Zoom's Attention Tracking?

Zoom's attendee attention tracking was an in meeting feature, it was removed on April 2, 2020, and it has no connection to email whatsoever. It comes up in every conversation about Zoom and surveillance, so it is worth stating accurately and then setting aside.

While it existed, the feature showed the host a clock icon beside your name if the Zoom window had not been in focus for more than 30 seconds during a screen share, plus a post meeting report of what percentage of the time each participant kept the presentation window in focus. Zoom retired it during the spring 2020 privacy backlash, and researchers later used it as a case study in redesigning privacy with user feedback at ACM CHI 2024. Nothing about it ever touched your inbox.

What This Means for Your Inbox

If you have ever registered for a vendor webinar, your address is almost certainly sitting in a marketing automation platform right now, and the mail it sends you is instrumented even though Zoom's reporting is not. That is the practical takeaway. The tracking follows the registration, not the video call.

An open pixel reports more than a checkmark. It records the moment you opened the message, which pins you to a time zone and a working pattern, plus your IP address, device type, email client, and operating system. Open the same message three times on a Tuesday and the sender logs three timestamped events. Gmail's image proxy blunts the IP disclosure by fetching images through Google's servers, but the open still registers, and the proxy does nothing about rewritten links.

Click tracking matters more, because it survives every defense aimed at images. Every link in a Pardot or Marketo email routes through the tracker domain first. Clicking a Zoom newsletter link means requesting click.zoom.us, letting Salesforce log the event against your record, then landing on the page you wanted. That is why detecting email tracking pixels in Gmail is only half the job, and why whether someone can tell you read their email depends on the sending platform more than the brand in the signature.

How Do You Block Email Tracking in Zoom Messages?

Work through these in order. The first three are free and take five minutes. Our fuller walkthrough on how to block email tracking in Gmail covers the settings in more depth.

• Turn off image auto loading in Gmail. Open Settings, then General, find Images, and select "Ask before displaying external images". No pixel fires on preview.
• Check the link host before you click. Hover any link in a Zoom message and read the status bar. A destination on click.zoom.us or click.zoom.com means Salesforce logs the click. A plain zoom.us link does not.
• Read the raw message. In Gmail, use the three dot menu and choose Show original, then search the source for img tags with width and height of 1, and for the tracker hostname. That settles whether a message is instrumented.
• Use the opt out that actually exists. Zoom's privacy statement says you can opt out of marketing communications in the message itself or by emailing privacy@zoom.us. It also notes you will keep receiving transactional mail such as bills and service notices regardless.
• Install a blocker. Manual inspection does not scale to a hundred messages a week. An extension that strips pixels and rewrites tracked links back to their real destinations handles it silently.

Gblock Compared to Ugly Email, PixelBlock, Trocker, Proton Mail and HEY

Every tool below genuinely blocks something, and choosing well means knowing what each leaves on the table. We keep a longer breakdown in our guide to the best email tracker blocker extensions.

The dividing line that matters for Zoom mail specifically is link handling. A pixel only blocker leaves click.zoom.us intact, and since Pardot logs the click at that redirect, half the tracking survives. Our comparison of Ugly Email, PixelBlock and Trocker alternatives goes through the tradeoffs case by case.

What We Could Not Verify

Honest reporting means marking the edges of the evidence. Zoom does not document an open pixel in the confirmations and reminders sent by Zoom Events or Zoom Webinars, and no open metric appears anywhere in the host facing reporting we reviewed. Absence of a documented feature is strong evidence, but it is not the same as inspecting every message Zoom sends, so we cannot state categorically that no pixel exists in any Zoom transactional template.

Neither Zoom's privacy statement nor its cookie statement mentions web beacons, pixel tags, or clear GIFs in email, which is unusual for a company running a Pardot instance. The hosts email.zoom.us, info.zoom.us and mkto.zoom.us do not resolve, so any claim built on those names is fabricated. Zoom Contact Center sends outbound email, but its campaign tooling is documented around voice dialing rather than tracked blasts, and we found no open tracking reporting for it. Treat that as unverified.