How companies track you by email - and what to do about it
We know companies track us. Our phone is always listening, we haven’t even shared our next purchase with our friend and we’re already seeing the thing in ads.
Spoiler alert: algorithms are smart. They have the history of your Google searches, your watched Amazon products. They also know if you opened an email or not; have you ever received this friendly email of “Hey, we noticed you haven’t interacted with our emails in a while!”? They know.
Well, whether you want to be tracked or not, I just want to give you the tools to choose to take action or not.
tl;dr. Remove everything to the right of
?from your URLs
Uniform Resource Locators
We know these as links, references or URLs, they are pretty common actually. They are unique identifiers for Internet resources like websites, videos and pictures. Everything in the web is reached through a URL.
Structure
A URL has a very simple structure. Let me break down the next example URL:
https://www.example.com/path/to/page?parameter1=value1¶meter2=value2
https— Protocol (secure HyperText Transfer Protocol)www.example.com— Domain/path/to/page— Path?— Query string separatorparameter1=value1¶meter2=value2— Query parameters
The query string is everything after the ? and before any #. This is where websites attach metadata to links.
Tracking Parameters
Companies attach tracking parameters to URLs so they can track where clicks come from, which email campaign worked, which user clicked, etc.
Example tracking parameters in a URL:
https://example.com/product?utm_source=email&utm_medium=newsletter&utm_campaign=summer_sale&utm_content=button_cta
Breaking this down:
utm_source=email— Traffic sourceutm_medium=newsletter— Medium typeutm_campaign=summer_sale— Campaign nameutm_content=button_cta— Specific content identifier
Every time you click this link, the company logs: which email list you’re on, which version of the email you received, which button you clicked, and which campaign you’re interested in. This builds a profile of you.
Email Tracking Pixels
Beyond URL parameters, companies use tracking pixels — tiny, invisible images embedded in emails. When your email client loads the image, the company’s server logs:
- That you opened the email
- When you opened it
- What device you used
- Your IP address (approximate location)
- Whether you opened it multiple times
This is why your email provider asks if you want to load images. Many spam and tracking emails rely on this.
How to Protect Yourself
1. Clean Your URLs
Before clicking a link from a promotional email, check the URL in your browser. Remove everything after and including the ?:
Before: https://shop.com/sale?utm_source=email&utm_medium=promo
After: https://shop.com/sale
2. Disable Image Loading in Email
Most email clients allow you to disable automatic image loading:
- Gmail: Settings → Advanced → Images → Ask before displaying images
- Outlook: File → Options → Trust Center → Automatic Download
- Apple Mail: Preferences → Viewing
3. Use Email Aliases
Create temporary or separate email addresses for shopping, newsletters, and promotions. This isolates tracking data.
4. Unsubscribe from Unwanted Lists
Click the unsubscribe link at the bottom of marketing emails (usually required by law). This reduces tracking emails overall.
5. Use Privacy-Focused Email Providers
Consider services like ProtonMail or Tutanota that don’t load images by default and encrypt your mail.
Conclusion
Companies will continue to track you. The goal is not privacy perfection (impossible), but rather conscious control over how much data you leak. Clean URLs, disable images, use aliases — small actions add up to better privacy.