Skip to content
Learn · Updated September 2026

Email tracking

Email tracking records what happens to a message after it is sent — typically whether it was opened, whether links were clicked, and sometimes whether it was forwarded. Open tracking works by embedding a tiny image that loads from your server when the message is displayed, which is why it has become substantially unreliable.

How it works

A one-pixel image with a unique identifier is embedded in the message. If the recipient's client loads images, your server records a request and counts an open. Click tracking rewrites links to route through your domain before redirecting, which is more reliable because a click requires deliberate action.

Why open rates stopped meaning much

Apple's Mail Privacy Protection pre-fetches images through a proxy whether or not the recipient reads the message, so a large share of recorded opens are machine-generated. Corporate security scanners do the same. Treat open rate as a rough directional signal at best and never as a scoring input.

Tracking domains matter

Rewritten links carry reputation. Using a shared tracking domain means inheriting the reputation of everyone else on it; a tracking subdomain of your own sending domain, over HTTPS, keeps that reputation yours.

Setting up email tracking safely: 1. Create a tracking subdomain; 2. Point DNS and enable HTTPS; 3. Test every link before sending; 4. Keep tracking off during warmup; 5. Act on replies, not on opens.
Setting up email tracking safely

What does a tracking setup actually need?

Three pieces. A tracking domain that serves the pixel and handles link redirects, a DNS record pointing that domain at the tracking service, and a valid HTTPS certificate so rewritten links do not trigger browser or filter warnings. A missing certificate is a common reason tracked links look suspicious.

Use a subdomain of the domain you send from, so the links in the message match the From address. Before a campaign, send yourself a test and click every link to confirm each one resolves and lands on the right page.

Keep the tracking domain stable. Changing it mid-campaign breaks links in messages already delivered, and a brand-new tracking domain has no history of its own, so filters treat it cautiously for a while. The DMARC policy and alignment on the sending domain should be in place before tracking is added, because a tracking subdomain inherits trust from a parent domain that authenticates correctly.

What are the privacy and consent questions?

Tracking pixels and rewritten links collect data about a person's behaviour, so privacy law applies. In the EU and UK, placing tracking in an email is generally treated like other tracking technologies and may need a lawful basis or consent, and your privacy notice should say that you measure opens and clicks. The GDPR outreach entry covers the wider picture; check the specifics with counsel for your market.

Some teams switch open tracking off for regions with stricter rules and keep only reply measurement, which needs no pixel at all.

Retention matters too. Decide how long you keep open and click logs, delete them on that schedule, and make sure an unsubscribe or erasure request removes the tracking history along with the contact.

When is it better to turn tracking off?

For the first message to a fresh list, or while a new domain is still in mailbox warmup. The pixel and rewritten links add signals that filters weigh, and early on you need every advantage. Reply rate works without tracking and is the metric that matters most at that stage.

Turn click tracking back on for later steps where a link is the point of the message, and compare placement tests before and after so you can see whether tracking changed where your mail lands.

How should tracking data feed the rest of your process?

Carefully. Opens should never move a lead to a new stage or trigger a sales call by themselves, because many of them are machines. Clicks on a specific link can reasonably prompt a relevant follow-up, and replies should always end the automated sequence. Autocloz uses per-workspace tracking domains and ends a sequence on a reply, never on an open, which is the order of trust described above.

How Autocloz handles it

Autocloz tracks opens and clicks with per-workspace tracking domains rather than a shared one, and reports reply rate as the primary engagement metric precisely because open rate is no longer trustworthy. Sequence exit is driven by replies, never by opens.

FAQ

Is email open tracking still accurate?

Not reliably. Apple's Mail Privacy Protection pre-fetches tracking images regardless of whether a message is read, and corporate scanners do the same, so recorded opens include a large share of machine activity. Clicks and replies are far more trustworthy signals.

Should I use a shared tracking domain?

No. A shared tracking domain means your links carry the reputation of every other sender using it. Use a tracking subdomain of your own sending domain, served over HTTPS, and never a public link shortener.

Related terms

Email tracking — explained by Autocloz