Apple Mail Privacy Protection

Apple Mail Privacy Protection launched with iOS 15 in September 2021 and is now standard across iOS 15+, iPadOS 15+, and macOS Monterey and later. The first time a user opens the Mail app after upgrading, Apple prompts them to choose whether to enable MPP. The prompt's recommended option is "Protect Mail activity." Most users tap it.

What MPP does mechanically

When MPP is on, two things happen behind the scenes. First, Apple pre-loads every piece of remote content in the email, including the tracking pixel, on Apple's relay servers before the user opens the email. Second, the IP address reported to the sender is Apple's relay, not the recipient's actual IP. The geolocation is meaningless. The open timestamp is meaningless. The user might never open the email at all.

The pre-fetch typically happens within minutes of delivery, regardless of whether the user opens the message. For tracking tools that count every pixel load as an open, this fires a false-positive open event for every MPP-enabled recipient on the list.

Why this matters for email tracking

Apple Mail accounted for 62 percent of the opens Litmus measured in July 2026, and Litmus says studies put Mail Privacy Protection at 55 to 60 percent of all email opens. When Apple Mail asks, the recommended option is "Protect Mail activity," so most people who see the prompt switch it on.

The result is that raw open rates in 2026 run well above the number of people who read. Apple's pre-fetches are the biggest source, corporate email scanners add more, and Gmail's image proxy can report one read as several fetches.

How modern trackers handle MPP

Apple describes the behavior on its Mail Privacy Protection page, and there is no technical workaround. MPP-distorted opens cannot be detected by counting pixel loads alone. They can only be detected by analysing the pattern of the load: instant timestamp, Apple-attributable IP block, no follow-up click activity.

Outsolvi labels an Apple prefetch "Apple Mail", with the reason "reached an Apple Mail inbox", and leaves it out of the open count. It stays on the email's timeline so you can see the message arrived; it just isn't counted as a read. A click or a reply from that person still counts. A tracker that counts every pixel load counts each of these prefetches as an open.

Common misconceptions

"MPP only affects Apple Mail accounts." No. MPP affects any recipient who reads through the Apple Mail app, regardless of which mailbox provider hosts the email. A Gmail user reading their work email in Apple Mail on macOS produces the same MPP pre-fetch signature as a recipient on an iCloud Mail address.

"MPP can be detected and excluded." Not by raw open count. Filtering MPP requires analysing IP block, User-Agent string, and timing signature, which is what confidence-scoring trackers do. Tools that count every load without grading it cannot tell which opens are MPP and which are humans.

"Open rate is dead." No, but raw open rate is. An open rate that counts only opens graded as a person (in Outsolvi, "verified" and "most likely human") is still worth watching. The metric is fine; the unfiltered version of it isn't.