Every email campaign dashboard tells a story: who opened, who clicked, who converted, who ignored the message entirely. But behind those neatly formatted charts and percentages lies an invisible infrastructure of tracking pixels, server redirects, database writes and HTTP requests that makes the entire system work.
Most marketers interact with these numbers daily without understanding how they are actually collected. That gap between seeing a metric and understanding its mechanics matters because how a metric is collected determines how reliable it is.
Here is how email tracking actually works under the hood — from the moment you press send to the moment a conversion appears in your dashboard.
Before You Press Send: What Happens to Your Email
When you hit send, your email platform does not deliver your HTML exactly as you wrote it. Before the email reaches subscribers, the platform modifies it by inserting a unique tracking pixel, rewriting every link with a distinct tracking redirect URL, appending campaign identifiers and subscriber IDs, adding UTM parameters for analytics platforms, and generating unique tracking URLs per recipient.
The result is that every subscriber receives a slightly different version of the same email. That uniqueness is what allows platforms to know which individual opened, clicked and eventually converted.
How Open Tracking Works
The Tracking Pixel
Open tracking relies on a mechanism that is almost absurdly simple given how much data it generates. Embedded inside almost every marketing email is a transparent image — usually exactly 1x1 pixel in size — called a tracking pixel. When the email client renders the message and downloads that image from the sender's tracking server, it sends an HTTP request that records the open event.
That single request transmits confirmation that the email was opened, the exact timestamp, the recipient's IP address for approximate geographic location, the device type and operating system, the email client in use, and the timezone offset.
To the recipient, nothing appears different. The image is invisible, typically styled with inline CSS that sets its dimensions to zero or renders it as a transparent pixel. The subscriber receives their email and reads it normally while the tracking infrastructure silently records the interaction.
What the Tracking Server Receives
When the pixel request arrives at the tracking server, it is a standard HTTP GET request. The server logs the request details, cross-references the unique pixel URL against the campaign database, and updates the analytics dashboard with the recorded open. This all happens in milliseconds.
Why Opens Are Never Perfectly Accurate
Open tracking depends on one critical assumption: the email client must load images. When images are blocked — either by default or by user preference — the tracking pixel never loads, no request reaches the server, and no open is recorded. This has been true since the earliest days of email tracking.
The implication is that open rates have never been 100% accurate, even before recent privacy changes. Some percentage of genuine opens are never recorded because images are blocked. The question has always been how large that percentage is and whether it remains consistent across campaigns.
Apple Mail Privacy Protection Changed the Rules
For years, marketers treated open rate as one of the most reliable engagement signals. Then Apple launched Mail Privacy Protection in September 2021, fundamentally altering how open tracking works for a significant portion of email recipients.
How MPP Works
Instead of waiting for the user to open an email, Apple's servers proactively download all email content — including tracking pixels — through their own proxy infrastructure. This happens in the background, often before the user has even seen the email. From the tracking server's perspective, the email appears to have been opened even if the recipient never actually read it.
What MPP Means for Your Metrics
The practical effect is significant and well-documented:
| Impact |
Explanation |
| Inflated open rates |
Many recorded opens are pre-load events, not human reads |
| Reduced engagement signal reliability |
You cannot distinguish genuine opens from automatic pre-loads |
| Location data degraded |
Apple proxies mask the recipient's real IP address |
| Device information distorted |
The request comes from Apple's servers, not the user's device |
| Apple Mail segment becomes unmeasurable |
Opens from Apple Mail users cannot be trusted as engagement data |
Open rate still provides useful directional context, especially when measured over time within the same platform. But treating it as a precise measure of genuine engagement is no longer justified.
How Click Tracking Works
The Link Rewrite Process
Click tracking follows a different technical approach that is generally more reliable than open tracking. Instead of relying on a passive image load, click tracking requires an intentional action from the subscriber.
When you create a campaign, the email platform replaces every URL in your email with a unique redirect URL. A link that appears as:
https://example.com/pricing
Actually becomes something like:
https://tracking.yourplatform.com/redirect?id=abc123xyz&c=summer-campaign
What Happens When Someone Clicks
The redirect chain works in four steps:
- The subscriber clicks the visible link, which actually points to the tracking server
- The tracking server receives the request and logs the click event — who clicked, which email, which link, the timestamp, and the device information
- The server sends an HTTP redirect response (typically a 302 or 307 status) pointing to the actual destination URL
- The subscriber's browser follows the redirect and loads the intended page
The entire process takes milliseconds. Most subscribers never notice the intermediate redirect, though the URL in their browser address bar will reflect the final destination after the redirect completes.
Why Every Recipient Gets Different Links
Every tracked URL is unique per recipient. This is how platforms can report not just that a campaign received 1,245 clicks, but exactly which subscribers clicked which links at which times. The uniqueness is embedded in the URL — a query parameter or path segment that maps back to a specific subscriber and campaign combination in the tracking database.
Click Tracking Limitations
Clicks are not perfect either. Security scanners used by many businesses inspect every link in incoming emails for malware before delivery. This scanning process can accidentally trigger click redirects, producing phantom clicks in your dashboard that no human ever performed. Most modern platforms attempt to filter these automated interactions, but the filtering is never perfect.
Conversion Tracking
Tracking does not stop when a subscriber reaches your website. Conversion tracking connects email activity to downstream business outcomes such as purchases, sign-ups, downloads and bookings.
How It Connects Email to Revenue
Conversion tracking typically works through one of two mechanisms:
Script-based tracking: A JavaScript snippet on your landing or checkout page communicates back to the email platform when a conversion occurs. The script reads the tracking parameters from the URL (added during the click redirect), identifies which campaign and subscriber generated the visit, and records the conversion event.
API-based tracking: Purchase data from your ecommerce platform or CRM is sent to the email platform via API, matched to the subscriber record, and attributed to the most recent campaign or automated flow that generated the click.
Without website tracking, an email platform knows someone clicked your link but has no idea what happened next. Conversion tracking closes that loop, enabling metrics such as conversion rate by campaign, revenue attributed to each send, return on investment per campaign, revenue per recipient, and cost per acquisition by channel.
UTM Parameters and Web Analytics
You have likely noticed email URLs ending with parameters like ?utm_source=email&utm_medium=newsletter. These are UTM parameters — standardized query string tags that analytics platforms use to identify traffic sources.
A fully tracked email link might include utm_source set to "email", utm_medium identifying the email type (newsletter, promotional, transactional), utm_campaign for the specific campaign name, utm_content to distinguish between different links or variants within the same email, and occasionally utm_term for keyword tracking.
UTM parameters allow Google Analytics, Adobe Analytics and other platforms to attribute website visits and conversions back to specific email campaigns. They work alongside the email platform's click tracking rather than replacing it.
Why Different Tools Show Different Numbers
It is common to compare reporting across platforms and see different numbers for the same campaign. Consider a typical discrepancy:
| Platform |
Reported Clicks |
| Email platform |
1,245 |
| Google Analytics |
1,180 |
| Website server logs |
1,201 |
None of these numbers is necessarily wrong. Each platform measures clicks differently. Email platforms count every tracking redirect that fired, including those triggered by security scanners. Google Analytics counts only sessions where the landing page loaded with email UTM parameters visible. Website server logs count every HTTP request to the landing page, including bot traffic and incomplete page loads. Some platforms deduplicate multiple clicks from the same subscriber while others count every click individually. Privacy features like Intelligent Tracking Prevention may block some tracking from registering. And attribution windows vary — one platform may use a 7-day window while another uses 30 days.
Small differences between platforms are normal and expected. Large or systematic discrepancies warrant investigation.
What Tracking Can and Cannot Tell You
Understanding how tracking works helps you evaluate what each metric actually measures and where its limitations are.
What Tracking Tells You Reliably versus Less Reliably
| Metric |
Reliability |
Reason |
| Clicks |
High |
Requires intentional action from the subscriber |
| Conversions |
High |
Completed action verified by website or API |
| Revenue attribution |
Moderate to high |
Depends on attribution window and cross-device tracking |
| Click timing |
High |
Server-side timestamp recorded at redirect |
| Device and client distribution |
Moderate |
Apple Mail data is distorted by MPP proxies |
| Open rate |
Low |
Inflated by MPP, reduced by image blocking, distorted by preview panes |
| Geographic location |
Low |
Masked by MPP proxies and VPNs |
| True incrementality |
Low |
Tracking shows correlation, not causation — holdout testing required |
The Future of Email Tracking
Privacy expectations continue to evolve across the industry. Browsers block more third-party tracking by default. Operating systems restrict access to device identifiers. Email clients introduce new privacy features. And regulatory frameworks increasingly limit what data can be collected and how it can be used.
The direction of travel is clear: less data will be available, and the data that remains will be less granular. Rather than attempting to collect more information, the industry is learning to make better decisions with less.
This shift means focusing less on individual opens and more on meaningful business outcomes. Click patterns, conversion rates, revenue attribution and subscriber retention provide more actionable signals than open rate ever did, even before MPP made it unreliable.
Key Takeaways
- Email tracking relies on three mechanisms: tracking pixels for opens, link rewrites for clicks, and script or API connections for conversions
- Open rates have become unreliable due to Apple Mail Privacy Protection and should not be treated as a precise engagement metric
- Click tracking is more reliable than open tracking because it requires intentional action from the subscriber
- Different analytics platforms will always show slightly different numbers due to different measurement methodologies
- Conversion tracking is the most valuable because it connects email activity to business outcomes
- Privacy trends continue to reduce the amount of granular data available, shifting focus toward meaningful business metrics over individual engagement signals
Related Articles
