<- Back to Index

Pixel Tracking

The anatomy of the 1x1 invisible image used to spy on emails and web pages.

The Invisible Observer

A tracking pixel is a transparent 1x1 image (usually a GIF) embedded in an email or web page. It is not designed to be seen; its purpose is to force your browser or email client to make a network request to a tracking server.

The Anatomy of a Request

When you open an email containing a pixel, your client requests the image from the server. This request leaks:

  1. IP Address: Revealing your general geographic location.
  2. User-Agent: Revealing your device and OS.
  3. Timestamp: Exactly when you opened the email.
  4. Referrer: Sometimes revealing where you opened it from.
  5. URL Parameters: The image URL often contains a unique ID (e.g., track.gif?user_id=12345&campaign=summer_sale).
Parameter Value Meaning
utm_source newsletter Where the traffic came from.
uid a8b9c0 Unique identifier linking the open to your specific email address.

Defense

Most modern email providers (like Apple Mail with Mail Privacy Protection, or Hey) proxy images through their own servers, masking your IP and pre-loading images so the sender can't know exactly when *you* opened it. Disabling automatic image loading in your email client is the most effective manual defense.