Is it legal to track when someone opens your email?

For ordinary one-to-one email, tracking whether your own message was opened is legal in most countries and is standard practice in sales and business. Stricter rules apply to bulk marketing email and to combining tracking with personal data, especially under laws like the EU’s GDPR and ePrivacy rules.

Do you need consent to use email tracking?

For personal, individual emails, explicit consent is generally not required. For marketing emails sent at scale, privacy laws such as GDPR can require a lawful basis and clear disclosure. The safe rule is: personal one-to-one is fine; bulk marketing needs care and legal advice.

Is email tracking legal under GDPR?

GDPR does not ban email tracking, but it treats tracking data as personal data, so bulk/marketing use needs a lawful basis and transparency. Tracking your own individual business correspondence is generally low-risk; large-scale marketing programmes should get proper legal advice.

Blog

Is email tracking legal?

It’s a fair question to ask before you add a read receipt to your emails. The short version: tracking whether your own message was opened is legal and extremely common — but the picture changes for bulk marketing and personal data. Here’s a plain-English guide to where the lines are.

By Daniel O'Loughlin · 1 July 2026

This article is general information, not legal advice. If you run a large marketing programme or have specific concerns, talk to a qualified lawyer in your jurisdiction.

The short answer

For ordinary, one-to-one email — a proposal, a job application, a client follow-up — tracking whether your own message was opened is legal in most countries and is a standard business practice. Sales teams have done it for years. Nothing about knowing your email was read is inherently unlawful.

Where it gets more nuanced

The complications appear when tracking scales up or gets combined with personal data:

Bulk marketing email. Sending tracked marketing to large lists sits under anti-spam and privacy laws (GDPR and ePrivacy in the EU, CAN-SPAM in the US, PECR in the UK, CASL in Canada). These govern consent, opt-outs and disclosure.
Personal data. Under the EU’s GDPR, tracking information tied to an identifiable person counts as personal data, so large-scale use needs a lawful basis and transparency about what you collect.
Combining tracking with profiling. Using opens to build detailed behavioural profiles carries more obligations than simply seeing whether one email was read.

A simple rule of thumb

What you’re doing	Risk level
Tracking your own one-to-one business emails	Low — generally fine
Tracking replies within an ongoing conversation	Low
Bulk marketing to a purchased or cold list	Higher — needs consent/disclosure and legal review
Building behavioural profiles from opens	Higher — get legal advice

What about the recipient’s privacy?

This is really the heart of the concern, and it’s worth taking seriously. A tracking pixel tells you that and when an email was opened — not what the person typed, who else they emailed, or anything inside their inbox. It’s closer to a delivery confirmation than surveillance. Even so, how a tool behaves matters:

Honest signals. A tracker should distinguish a genuine human open from an automated pre-fetch, rather than inventing reads — see Apple Mail Privacy Protection and open tracking.
No hidden identifiers. A well-designed tracker uses an opaque token, not the recipient’s personal details, in the pixel.

How Vidi approaches this

Vidi is built for individuals sending important client-facing emails, not for mass marketing. It tells you privately when your message is read, adds nothing visible to the email, and turns the tick green only on a genuine human open. It’s the delivery-confirmation model: enough to stop wondering, not a profiling engine. See it running on a real inbox in the interactive demo.

Bottom line

Knowing whether your own email was read is legal and normal for everyday correspondence. Keep it proportionate, be thoughtful about bulk marketing, and get legal advice if you’re operating at scale. If you just want to stop refreshing your inbox wondering, that’s exactly what Vidi is for — get started with Vidi.

Know when your email is read — the honest way

Vidi turns every important email into a clear grey-tick / green-tick answer — across Gmail, Yahoo Mail and Outlook.

Get started

$1.99/month launch pricing, locked in for as long as you stay, or pay once and never pay again · 30-day money-back guarantee · Cancel in two clicks