.jpg){kind=tracking}
If you send email from Gmail for sales, recruiting, or any kind of outbound, you have probably asked the obvious question: is anyone actually opening this? Email tracking promised the answer, and for years a tracking pixel quietly reported who opened, when, and how often. That signal is now far less dependable than it used to be, especially for cold outreach.
Since August 2024, and still today in 2026, Gmail has been hiding images on messages it considers risky and showing the recipient a warning: "Images in this message are hidden. This message might be suspicious or spam". Because open tracking depends on loading an image, a flagged message reports no open even when it was read, and the warning itself can nudge recipients toward the spam button. Tracking is not dead, but for outbound it now has to be used differently.
This guide, for sales reps, founders, recruiters, agencies, and B2B teams, covers how email tracking in Gmail works, what Google's image change actually does and when it fires, the tracking tools and setup options, and, most importantly, what to measure once opens stop being trustworthy. The throughline: tracking shows engagement signals, but it is not proof of inbox placement, sender reputation, or contact quality, and treating it as such is where outbound teams go wrong.
TL;DR: Email tracking in Gmail watches what happens after you send: opens (via a 1x1 pixel), clicks (via a tracked link) and replies. Native read receipts are admin-gated and impractical for outbound, so teams use extensions, CRMs or sales engagement platforms. The catch: since August 2024 Gmail hides images on messages it deems risky and shows a "suspicious" warning, so the pixel often doesn't load and opens under-report, and the "report spam" prompt beside it can lift complaints, which hurts deliverability more than the lost data. Google publishes no trigger criteria, but risk rises with spammy content, no opt-in, weak reputation and no prior engagement. So trust replies first (unfakeable), clicks second (watch for security-scanner spikes), and treat opens as a soft hint. For risky cold outbound, turn open tracking off, limit images, and route clicks through your own aligned tracking domain. Measure reply rate, spam rate and sender reputation instead. Above all, tracking is not deliverability: an open never proves inbox placement, reputation or list quality, so verify the contacts behind the send.
What is email tracking in Gmail?
Email tracking in Gmail means monitoring what happens to a message after you send it: whether it was opened, whether links were clicked, whether it got a reply, and sometimes whether an attachment was viewed or a follow-up is due. Gmail itself offers a limited native option, read receipts, in some Google Workspace setups, but most tracking is done through third-party tools that plug into Gmail as Chrome extensions, CRM integrations, or sales engagement platforms.
The signals differ in how much they actually tell you, which is where most of the nuance lives.
How does Gmail email tracking work?
Open tracking is the classic method. The tool embeds a tiny, usually invisible 1x1 pixel image in the email body, and when the recipient's client loads that image, it pings the sender's server and logs an "open". It is the same mechanism sales engagement platforms and marketing tools have used for years.
Click tracking works differently and more reliably. Instead of an image, it routes each link through a tracking URL that records the click before forwarding the recipient to the real destination, so a click reflects a deliberate action rather than an automatic image load.
Reply tracking is the strongest signal of the three, because a reply is something only a real person does on purpose. It cannot be faked by a preloaded image or a security scanner, which is why it holds up as opens grow less reliable. And opens are growing less reliable: image blocking, Apple's Mail Privacy Protection, and now Gmail's image-hiding behavior all interfere with the pixel, which is the subject of the next section.
How are Gmail read receipts different from third-party trackers?
Gmail has a native read-receipt feature, but it is deliberately limited. It is available only in certain Google Workspace editions, a Workspace admin has to switch it on, it is generally restricted to recipients inside approved domains, and it often asks the recipient to approve sending the receipt. That makes it workable for internal or account-based communication and close to useless for outbound at scale.
Third-party trackers exist to fill that gap. They log opens and clicks automatically, without asking the recipient, and add what sales teams actually need: real-time open alerts, follow-up reminders, CRM sync, sequence analytics, and team-level reporting. That flexibility is why outbound teams reach for an extension or a sales engagement platform rather than native receipts, though, as the rest of this guide shows, automatic open tracking is exactly what Gmail's recent changes have undermined.
The Gmail "images are hidden" change, and why it matters for tracking
Since August 2024, Gmail has been showing a warning on messages it treats as risky: "Images in this message are hidden. This message might be suspicious or spam", with a prompt to report spam sitting right above the message. The images, including the 1x1 tracking pixel, load only if the recipient clicks to show them. For anyone relying on open tracking, that is the problem in a single line: a flagged message records no open even when it was read.
It began as a change aimed at tracking pixels, but our own testing, and widespread reports since, show it is broader than that. The notice appears on emails that contain ordinary images and no open tracking at all, and it does not appear on every tracked email either. As of 2026, Google still has not published official criteria for when it fires, so what follows is drawn from our testing and the consistent patterns other senders report.
The bigger risk is not the lost open data, it is the "Report spam" prompt. When Gmail frames your message as suspicious and puts the report button in front of the recipient, you are more likely to collect spam complaints, and complaints are one of the fastest ways to damage deliverability and land in spam going forward.
When does Gmail show this notice, and what triggers it?
Because there is no official spec, the honest answer is that it is risk-based and inconsistent. From our tests and the reports we have gathered, the notice is most likely when several of these line up:
- your content looks spammy or overtly promotional
- you did not have opt-in consent to email the recipient
- your domain has a weak sending history that has hurt its sender reputation
- the recipient has never engaged with you, so the sender looks untrusted
- the email carries several images to a recipient who has not responded before
- you send from IPs or servers that providers consider low-trust
A few patterns are worth calling out. The rollout has been gradual rather than uniform, so two similar senders can see different behavior. It appears more readily on paid Google Workspace inboxes than on consumer Gmail in many reports. And while product notifications, newsletters, and transactional mail are far less likely to be hit, there is some evidence the notice can still show on messages sent through third-party servers, not only cold outreach. The takeaway is to monitor and audit your own sends rather than assume you are exempt.
Should you keep open tracking on or off for outbound?
For your riskiest outbound, turn it off. There is still no conclusive public guidance on exemptions, and since any image can trigger the notice, the safe move is to disable open tracking, and limit images generally, on the domains least likely to have earned prior engagement. In practice that means cold prospecting by sales reps, the exact traffic most exposed to the flag.
Turning it off is straightforward. Outreach documents how to change open-tracking settings in its help center, and Salesloft covers disabling it for team and personal cadences in this short walkthrough; any other platform's support team can point you to the same setting. If instead you are running genuine opt-in sending through a tool like Mailchimp or Intercom, this change is unlikely to affect you as long as you follow sending best practice.
What are the best email tracking options for Gmail?
Rather than rank individual trackers, it helps to choose by category, because the right option depends on whether you are an individual chasing follow-up timing or a team running outbound at scale. The table groups the main choices.
Two honest notes cut across this table. First, every option that reports opens does it with the same image pixel, so all of them are exposed to Gmail's suspicious-image flag on risky outbound; the tool you pick does not change that. Second, the last row is a different category on purpose. Inbox placement monitoring answers a question tracking cannot, whether your mail reaches the inbox at all, which is why it belongs next to a tracker rather than instead of one.
How do you add email tracking to Gmail?
Setup is quick whichever route you take. The real choice is between a browser extension, fastest for individuals, and tracking built into a CRM or sales engagement platform, better for teams.
Setting up a Gmail tracking extension
- Pick a tracker that fits your needs and volume.
- Install its Chrome extension and grant the Gmail permissions it requests.
- Enable open and, if you want it, click tracking in the settings.
- Send a test email to a mailbox you control and confirm the open or click registers.
- Decide, per the earlier section, whether to leave open tracking on for the audience you are actually emailing.
That last step is the one most guides skip, and the one that matters most for cold outbound.
Setting up tracking in a CRM or sales platform
For teams, tracking usually lives in the CRM (HubSpot, Salesflare) or a sales engagement platform (Outreach, Salesloft, Mixmax). Setup means connecting your Gmail or Google Workspace account, enabling the tracking settings, and choosing which signals to log, so opens, clicks, and replies sync to each contact's timeline and roll up into sequence and team reporting. Set permissions so reps see what they need without exposing the whole database.
One setup detail is worth getting right: the custom tracking domain. Click tracking routes links through a tracking domain, and if you use the provider's shared default, your links inherit the reputation of every other sender on it. A dedicated custom tracking domain, aligned with your sending domain, keeps that reputation yours and makes your links look consistent and trustworthy. It is a small configuration step with an outsized effect on how tracked links are treated.
What can email tracking in Gmail tell you?
Read as engagement data, tracking is genuinely useful. Read as proof of anything, it misleads. The table separates what each signal suggests from what it cannot establish.
How should you interpret opens, clicks, replies, and no-opens?
Opens are a soft signal. A recorded open means the image loaded, which may indicate interest, but image blocking, privacy proxies, Apple's Mail Privacy Protection, and Gmail's image-hiding all distort it in both directions. An open is a hint, not evidence.
Clicks are stronger, because a click is a deliberate action, but they are not immune. Corporate security scanners and link-protection tools sometimes click every link in an email to vet it, logging clicks the recipient never made. A cluster of instant clicks right after delivery is usually a scanner, not a prospect.
Replies are the signal to trust. A reply is a real person choosing to respond, which no pixel or scanner fakes. In a world of unreliable opens, reply rate is the metric that holds.
No-opens deserve the most caution. No recorded open does not mean the email was ignored; it may have been read with images off, filtered to spam, or hit by Gmail's hidden-image flag so the pixel never loaded. Before concluding that nobody is engaging, check whether you are even landing in the inbox.
What can Gmail email tracking not prove?
Tracking measures signals around a message; it cannot measure the things that decide whether outreach works. Specifically, it cannot prove:
- inbox placement (an open on one message says nothing about whether other recipients reached the inbox)
- sender reputation health
- that anyone actually read or absorbed the message, since a load is not attention
- list quality, meaning whether the addresses are valid, catch-all, or risky
And when replies are low, tracking cannot tell you why. The cause could be poor targeting, weak messaging, spam placement, invalid or risky contacts, or enterprise filtering, none of which shows up in an open or click number. That gap, between what tracking measures and what actually determines results, is why the next sections turn to what to track instead and where the real risk sits.
How to measure email success in Gmail going forward
If opens are no longer trustworthy for outbound, the answer is not to fly blind, it is to weight the signals that still mean something. None of these is new, but together they give a truer read than open rate ever did.
Reply rate is the metric to build around. A reply is unfakeable proof that the message reached a real person and earned a response, which is exactly what an open only hinted at. Track the percentage of sends that get a genuine reply, and segment it by campaign and audience so you can see which messaging and which lists actually work.
Click rate shows interest, with an asterisk. Clicks indicate someone acted on your offer, and you can measure them with UTM parameters or a tracked link. Just remember the earlier caveat: security scanners can inflate clicks, so watch for the instant post-delivery cluster, and route links through your own tracking domain rather than a shared one.
Spam rate and sender reputation are your early-warning system. A rising complaint rate or a sliding sender score predicts deliverability trouble before it ever shows up in replies. Monitor both with an inbox placement system, and clean your contact list regularly to strip out the invalid and risky addresses that drag reputation down in the first place.
Website visits close the loop when traffic is the goal. If a campaign is meant to drive people to your site, measure the visits it produces with an analytics tool like Google Analytics, or a visitor-identification tool like Warmly to see which companies arrived from your email.
Combine them, because no single number tells the story. Reply rate, click rate, spam rate, and site visits each capture one angle, and read together on a simple dashboard they surface trends and problems any one metric alone would hide. That composite view is the replacement for the old open-rate reflex.
And know when opens still earn their keep. For genuine opt-in marketing through tools like Mailchimp or Intercom, open data is largely unaffected and still useful. Opens can also stay meaningful inside your existing pipeline, on people who have already engaged with you, where the suspicious-image flag is far less likely to fire. The caution is specific to cold outbound, not a blanket ban on ever tracking an open again.
What privacy and deliverability risks should you watch for?
Tracking is not risk-free, and the risks fall into two buckets: what it does to your accuracy and the recipient's privacy, and what it can do to your deliverability when the setup is careless.
What tracking accuracy and privacy limits should senders understand?
Much of the accuracy loss covered earlier is privacy working as designed. Gmail proxies and caches remote images, Apple's Mail Privacy Protection preloads them on the recipient's behalf, and corporate gateways route content through privacy filters, all of which sever the clean link between "image loaded" and "person opened". These are features protecting recipients, not bugs to engineer around.
That framing matters, because privacy expectations differ by audience and region, and some recipients treat invisible tracking as intrusive on principle. Rules and norms vary, so avoid blanket legal claims; if you operate across regions, confirm your obligations against primary sources such as the relevant data-protection authority rather than a blog summary. The safe posture is to track transparently and lightly, and to assume a recipient may not want to be pixel-tracked at all.
Can email tracking hurt deliverability?
Tracking is not automatically harmful, but its infrastructure can be. The usual culprits are links that look suspicious, a shared tracking domain carrying other senders' poor reputation, and setups where the tracking domain is not aligned with your authenticated sending domain. As noted in setup, a dedicated custom tracking domain solves most of this; beyond that, keep links consistent and few, make sure the tracking domain is properly authenticated, and avoid over-instrumenting every message. For the broader mechanics, see our guide to email deliverability. And on cold outbound specifically, the image pixel itself is now a deliverability risk through Gmail's suspicious-image flag, which is reason enough to keep tracking minimal there.
How do you avoid making tracking feel intrusive?
Tracking data is for you, not for the conversation. Use it to time a follow-up or decide who to call, never as something you reference back to the recipient. "I noticed you opened my email three times" is the fastest way to make a prospect feel surveilled and go quiet. Lead with relevance instead: a reason to reply that stands on its own, sent to someone who plausibly wants to hear from you. Respectful, consent-aware outreach beats clever use of tracking data every time, and it ages far better.
How does email tracking in Gmail fit into a broader outbound workflow?
Tracking tells you what happened after you hit send: who opened, clicked, or replied. That is useful, but it is a rear-view mirror. It says nothing about the two things that decide whether outreach works in the first place, whether you are sending to real, safe contacts, and whether your mail is actually reaching the inbox. For B2B teams, tracking is one stage of a workflow that also has to reduce risk before and during sending.
How does Allegrow complement Gmail email tracking?
Allegrow is not a Gmail tracker, and it is not trying to be. It sits on the other side of the problem: the risk you want to remove before a tracked email ever goes out. Before you send, B2B email verification clears invalid, catch-all, and enterprise-gateway contacts, and Safety Net flags spam traps and known manual reporters that would otherwise burn your reputation. While you send, it monitors inbox placement and checks SPF, DKIM, and DMARC hourly, so a deliverability slip surfaces as a signal instead of a mystery.
The distinction is worth holding onto: Gmail tracking shows engagement signals after the fact, and Allegrow reduces the risks that determine whether your outreach reaches the right inboxes safely in the first place. One measures what happened; the other protects what happens next.
What are the biggest mistakes with email tracking in Gmail?
Most of these are covered above; gathered here as a quick pre-send checklist. They split into misreading the data and mishandling the setup.
Misreading the data:
- Treating an open as proof of interest, when it is a hint distorted by privacy tools and Gmail's flag.
- Reading a no-open as no interest, when the pixel may simply be blocked or hidden.
- Trusting a click spike without ruling out a security scanner.
- Referencing someone's open behavior in a follow-up, which makes prospects feel surveilled.
Mishandling the setup:
- Watching engagement while ignoring deliverability and inbox placement.
- Tracking a list you never verified, so bounces and spam traps quietly hit your reputation.
- Using a free tracker without checking its limits, branding, and shared tracking infrastructure.
- Leaving links on a shared tracking domain instead of a dedicated, authenticated one.
The through-line: tracking rewards discipline in both how you read it and how you wire it up.
Conclusion
Email tracking in Gmail still earns its place. Opens, clicks, replies, and follow-up activity are real engagement signals, and how you capture them depends on scale: native read receipts are limited and admin-gated, third-party extensions are flexible for individuals, and CRMs or sales engagement platforms are the right call for teams that need sequences, sync, and reporting.
What changed is how much weight opens can carry. Since Gmail began hiding images and flagging messages as suspicious, open tracking has stopped being reliable for cold outbound, and no tracker escapes that, because they all use the same pixel. So track what still holds, reply rate above all, and hold the hard line this guide keeps returning to: tracking is not deliverability monitoring. An open does not prove inbox placement, a healthy sender reputation, or a clean list, and treating it as proof is how outbound teams fool themselves.
That last gap is where the real work sits. As open rates fade as a signal, the list behind your sends matters more, not less, because invalid, catch-all, and spam-trap contacts are what damage the reputation that decides whether you land at all. Start a 14-day free trial of Allegrow to verify your own list and surface the risky addresses hiding in it: spam traps, manual reporters, and risky catch-all contacts legacy tools miss. If you also want a read on where your mail is landing, you can request a deliverability audit alongside the trial.
Frequently asked questions about email tracking in Gmail
Does Gmail have built-in email tracking?
Sort of. Gmail offers read receipts in some Google Workspace editions, but a Workspace admin must enable them, they are usually limited to approved domains, and the recipient may have to approve sending one. They work for internal mail and are impractical for outbound, which is why most senders use third-party tools.
What is the best email tracking tool for Gmail?
There is no single best; it depends on your use case. Individuals do fine with a lightweight extension, sales teams are better served by a CRM tracker, outbound teams need a sales engagement platform for sequences and reporting, and deliverability visibility calls for an inbox placement tool rather than a tracker at all.
Is Gmail email tracking accurate?
Not reliably, especially for cold outbound. Opens can be blocked, inflated, or hidden by image settings, privacy proxies, Apple Mail Privacy Protection, and Gmail's suspicious-image flag. Treat opens as a soft signal, lean on clicks and replies, and never read a single open as proof of anything.
What should I monitor besides Gmail opens and clicks?
Reply rate first, then bounce rate, inbox placement, spam placement, authentication status, domain health, and contact quality (validity, catch-all, and spam-trap risk). Together these reflect real recipients and real deliverability. Allegrow covers the verification and inbox-placement side for teams that need it.
