<story><title>What&apos;s in email tracking links and pixels?</title><url>https://bengtan.com/blog/whats-in-email-tracking-links-and-pixels/</url></story><parent_chain></parent_chain><comment><author>zzyzxd</author><text>This is an interesting reading. Although there are more tracking mechanisms than pixels. Surely you can configure your email client to not to load remote content automatically, but most of the clients will still leak information in various html&amp;#x2F;css elements.&lt;p&gt;A while ago, I used &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.emailprivacytester.com&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.emailprivacytester.com&amp;#x2F;&lt;/a&gt; to test several famous iOS email clients, and most of them more or less leaked _something_, even without loading remote content. In the end, I found Fastmail and Apple&amp;#x27;s built-in iOS mail client to be the top-notch in terms of privacy (Fastmail leaked nothing but only their server side DNS server via DNS prefetch[1][2], which has nothing to do with client. Apple is slightly worse, but still far better than any other email clients like Outlook, Spark, Edison...)&lt;p&gt;1. &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.emailprivacytester.com&amp;#x2F;testDescription?test=dnsLink&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.emailprivacytester.com&amp;#x2F;testDescription?test=dnsL...&lt;/a&gt;&lt;p&gt;2. &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.emailprivacytester.com&amp;#x2F;testDescription?test=dnsAnchor&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.emailprivacytester.com&amp;#x2F;testDescription?test=dnsA...&lt;/a&gt;</text></comment>
<story><title>What&apos;s in email tracking links and pixels?</title><url>https://bengtan.com/blog/whats-in-email-tracking-links-and-pixels/</url></story><parent_chain></parent_chain><comment><author>bengtan</author><text>Hi,&lt;p&gt;Author here.&lt;p&gt;This investigation into email tracking attempts to deconstruct tracking links and pixels and highlight the data that is being collected. It covers Mailchimp, ConvertKit, Substack and other Mailgun retailers.&lt;p&gt;There&amp;#x27;s also some attempted (albeit unsuccessful) reverse-engineering of an opaque token in the Substack section (If you like reading stuff about reverse-engineering).&lt;p&gt;Happy to answer any questions.&lt;p&gt;Thanks.</text></comment>