Email tracking


Email tracking is a method for monitoring the delivery of email messages to the intended recipient. Most tracking technologies use some form of digitally time-stamped record to reveal the exact time and date that an email was received or opened, as well the IP address of the recipient.
Email tracking is useful for when the sender wants to know whether the intended recipient actually received the email or clicked the links. However, due to the nature of the technology, email tracking cannot be considered an absolutely accurate indicator that a message was opened or read by the recipient.
Most email marketing software provides tracking features, sometimes in aggregate, and sometimes on an individual basis.

Read-receipts

Some email applications, such as Microsoft Office Outlook and Mozilla Thunderbird, employ a read-receipt tracking mechanism. The sender selects the receipt request option prior to sending the message, and then upon sending, each recipient has the option of notifying the sender that the message was received or read by the recipient.
However, requesting a receipt does not guarantee that one will get one, for several reasons. Not all email applications or services support read receipts, and users can generally disable the functionality if they so wish. Those that do support it are not necessarily compatible with or capable of recognizing requests from a different email service or application. Generally, read receipts are only useful within an organization where all employees/members are using the same email service and application.
Depending on the recipient's mail client and settings, they may be forced to click a notification button before they can move on with their work. Even though it is an opt-in process, a recipient might consider it inconvenient, discourteous, or invasive.
Read receipts are sent back to one's "Inbox" as email messages, but the location may be changed depending on the software used and its configuration. Additional technical information, such as who it is from, the email software they use, the IP addresses of the sender, and their email server is commonly available inside the Internet headers of the read receipt.
The technical term for these is "MDN - Message Disposition Notifications", and they are requested by inserting one or more of the following lines into the email headers: "X-Confirm-Reading-To:"; "Disposition-Notification-To:"; or "Return-Receipt-To:"
Several email tracking services also feature real-time notifications, producing an on-screen pop-up whenever the sender's email has been opened.

Return-receipts

Another kind of receipt can be requested, which is called a DSN, which is a request to the recipient's email server to send the sender a notification about the delivery of an email that the sender has just sent. The notification takes the form of an email, and will indicate whether the delivery succeeded, failed, or got delayed, and it will warn the sender if any email server involved was unable to give the sender a receipt. DSNs are requested at the time of sending by the sending application or server software, and the sender can request to "Never" get any, or to "Always" get one, or only to get DSN if delivery fails. These failure DSNs are normally referred to as a "Bounce". Additionally, the sender can specify in his or her DSN request whether the sender wants his or her receipt to contain a full copy of his or her original email, or just a summary of what happened. In the SMTP protocol, DSNs are requested at the end of the RCPT TO: command and the MAIL FROM: command.

Email marketing and tracking

Some email marketing tools include tracking as a feature. Such email tracking is usually accomplished using standard web tracking devices known as cookies and web beacons. When an email message is sent, if it is a graphical HTML message the email marketing system may embed a tiny, invisible tracking image within the content of the message. When the recipient opens the message, the tracking image is referenced. When they click a link or open an attachment, another tracking code is activated. In each case a separate tracking event is recorded by the system. These response events accumulate over time in a database, enabling the email marketing software to report metrics such as open-rate and click-through rate. Email marketing users can view reports on both aggregate response statistics and individual response over time.
Such email tracking services are used by many companies, but are also available for individuals as subscription services, either web-based or integrated into email clients such as Microsoft Outlook or Gmail
Email tracking services may also offer collations of tracked data, allowing users to analyze the statistics of their email performance.

Privacy issues

Email tracking is used by individuals like email marketers, spammers and phishers to verify that emails are actually read by recipients, that email addresses are valid, and that the content of emails has made it past spam filters. Such tracking can also reveal if emails get forwarded, but who emails get forwarded to is usually not noted.
When used maliciously, it can be used to collect confidential information about businesses and individuals and to create more effective phishing schemes.
Common data that can be accessed from email tracking includes, but is not limited to, the IP address, client device
properties, and a date/time stamp of when the email was read.
The tracking mechanisms employed are typically first-party cookies and web beacons.

HP email tracking scandal

In the U.S. Congressional Inquiry investigating the
HP pretexting scandal
it was revealed that HP security used an email tracking service called
ReadNotify.com to investigate boardroom leaks.
The California attorney general's office has said that this practice
was not part of the pretexting charges.
HP said they consider email tracking to be legitimate and will continue using it.