Tracking Protection and IP Privacy

Zero IP Leakage

When you send an email from PrMail, your real IP address never appears in the email headers. Unlike traditional email clients (Outlook, Thunderbird, Apple Mail) that embed your IP in the X-Originating-IP or Received headers, PrMail routes all mail through our infrastructure. The recipient sees only our mail relay headers — no trace of your location or identity.

Tracking Pixel Stripping

Many marketing emails embed invisible 1×1 pixel images that phone home to the sender's server when you open the email. This reveals:

• Your IP address (and therefore approximate location).
• When you opened the email.
• What email client you're using.
• How many times you opened it.

PrMail strips these tracking pixels automatically on all privacy levels. We detect and remove:

• 1×1 pixel images.
• Images with display: none styling.
• Known tracker domains (Mailchimp, SendGrid, HubSpot, Mandrill, ConvertKit, and more).

Remote Font Blocking

Remote fonts loaded from services like Google Fonts can be used to log your IP address. When your email client requests a font file, the font server sees your IP. PrMail blocks all remote font loading and replaces font declarations with safe system fonts.

This includes:

• @font-face declarations in CSS.
• Google Fonts and Typekit <link> tags.
• @import url() rules for remote fonts.

All fonts are replaced with -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif — your system's native font stack. Emails still look clean, but no external requests are made.

No Tracking Pixels in Outbound Email

PrMail is configured with open tracking and click tracking disabled on our outbound mail relays. We do not inject tracking pixels into your outbound emails. When you send an email, the recipient receives exactly what you wrote — nothing more.

Link Defanger

In addition to stripping tracking pixels, PrMail's link defanger automatically cleans all links in incoming emails. Shortened URLs are resolved to show the real destination, and tracking parameters (UTM, fbclid, gclid, HubSpot tokens, Marketo tokens, and more) are stripped from all URLs. Suspicious domains are flagged with a visual warning. See the Link Defanger article for full details.