How iOS 15 Mail Blocks Email Tracking Pixels

Apple introduced Mail Privacy Protection in iOS 15 to stop senders from using invisible tracking pixels to collect user data. This article explains how the Mail app intercepts these pixels, masks user IP addresses, and pre-loads email content through proxy servers to prevent senders from tracking when, where, and how often an email is opened.

The Problem: Invisible Tracking Pixels

Email marketers and automated platforms frequently embed a 1x1 invisible pixel image inside marketing and newsletter emails. When a recipient opens the message, their email client fetches this image from the sender's server. This request reveals the user’s IP address, approximate physical location, time of opening, device type, and confirms that the email address is active.

The Solution: Mail Privacy Protection

When enabled in iOS 15, Mail Privacy Protection (MPP) fundamentally alters how the native Mail app handles remote content like images and tracking pixels. Rather than fetching images directly upon opening an email, iOS routes the process through Apple’s proxy network.

The Step-by-Step Technical Process

  1. Background Downloading: When an incoming message arrives in the Apple Mail app, iOS downloads all remote content—including images and tracking pixels—in the background over a wireless connection. This happens automatically, regardless of whether the user actually taps to read the email.
  2. Two-Hop Proxy Routing: The download request is routed through a dual-hop proxy architecture. The first proxy assigns a generic IP address corresponding to the user's broad geographical region (such as their state or country), hiding their actual location. The second proxy handles the request to the sender’s server, preventing Apple from simultaneously seeing the user's identity and their email content.
  3. Local Caching: Once Apple's servers retrieve the images, they are cached locally. If and when the user opens the email, the Mail app loads the content from this local cache rather than contacting the sender's host server again.

The Impact on Senders

Because Apple pre-fetches the email content automatically, the sender’s server registers that the email has been opened, even if the recipient never views it. This creates false-positive open rates near 100% for iOS Mail users. Furthermore, senders cannot track:

  • Open Times: The recorded "open" occurs when Apple's servers download the assets, not when the user reads the message.
  • Geographic Location: Senders only receive the broad region provided by Apple's proxy IP, completely obscuring specific cities or neighborhoods.
  • Device Details: The user agent reported to the sender reflects Apple’s proxy system rather than the user's specific iPhone or iPad specifications.