emailrules.today
Stop 7 of 8Week oneMinutes to days

Apple MPP

Mail Privacy Protection — Apple preloads images so classic open tracking no longer means a human opened the email.

Say it out loud

“Since 2021 Apple loads the tracking image automatically. Our open rate counts machines, not people.”

Apple Mail Privacy Protection proxies and prefetches images for Apple Mail users who opted in, which fires the open pixel without anyone reading anything. Because Apple Mail is a large share of consumer email, a substantial part of every open rate since September 2021 is machinery. Platforms that feed those opens into engagement scoring or revenue attribution will flatter you.

In your dataHow to see it in your own numbersExample numbers
Open rate 71%

A number that should have made somebody suspicious.

Opens within 60s of delivery 68%

Humans do not open at that rate within a minute. Machines do.

Apple Mail share of opens 52%
Click-to-open ratio 1.3%

This was around 9% before September 2021. The denominator inflated; the numerator did not.

The clicks are real. The opens are a mixture.

Nobody's

Nothing to action — it changes a number or a risk you report.

What goes wrong

Building the engagement segment on opens. A sunset policy driven by opens will keep machine-opened dead addresses and cut genuinely interested people who read in a client that blocks images.

What people get told

The claim. “You can filter MPP opens out and get a clean number back.”

Actually. You can identify many of them and platforms do try. You cannot recover the pre-2021 metric, because a real Apple Mail user who genuinely read the email is indistinguishable from the prefetch. The correct response is to change which number you make decisions on, not to repair this one.

The dated rules behind this

A definition is not a citation. These are the pages with the primary source, the date it was published, and what to do about it.

See also

Where this sits

Stop 7, a human reacts. Somebody opens, clicks, ignores, unsubscribes, or presses the button that costs you the most.

← BeforeSpam trapNext →Complaint rate / spam rate

FAQ

Awkward questions

Who is this actually for?

People who ship email and are too busy to re-read every PDF: week-one marketers, lifecycle/CRM, deliverability, multi-country ops, DTC brands, agencies — on Klaviyo, Mailchimp, Braze, HubSpot, SFMC, or something else. Pick your tool and geos so product-specific pages only appear when they match. EU and UK are first-class filters. Not for people who sell tools about email and need a fake score to demo.

Why only ~40 rules? Isn’t that… thin?

On purpose. A wall of 400 undated “best practices” is how you look busy and still get burned. Every page needs a primary source we actually read. Thin and checkable beats fat and folklore. Europe, bulk inbox rules, measurement honesty, and protocol topics like BIMI/DMARC policy are on the shelf when we can cite them — not every Member State and not every vendor myth. Coverage map lists what we still refuse to invent.

Is this legal advice?

No. If it were, you’d have a billable hour and a longer PDF. This is a dated operator reference written by an email geek. Confirm anything high-stakes with counsel who knows your facts. Same for “will this make me compliant?” — no tool does that. Lawyers and judges do. We say what the sources say and what to do first on Monday.

Why no trust score out of 100?

Because we refuse to invent a number you can’t audit. Fake scores sell seed tests and panic. You get findings, dates, and links. If that feels less exciting than a red dial, good — you’re not the red-dial customer.

Why should I trust you more than my ESP’s blog?

ESPs sell seats. Seed-score vendors sell fear. AI invents citations when nobody watches. We sell nothing today — no pixels, no placement scores, no affiliate — so we can say when a tool is the problem. A human verifies, dates, and corrects in public. Tools may help draft; they do not ship unsourced claims. Check the primary links. Fail that test and leave.

Do I need an account?

No. Filters live in this browser and the URL. Share the link. That’s it. Accounts come later only if they earn it — not so we can nurture you about email.

I’m an agency. Where’s multi-client mode?

We tried a client-name CRM on the setup card. It made the product feel like work before it felt useful. Role filters + copy link + one-page brief (optional PDF title) is enough for now. Complexity comes back when the free shelf is habit, not before.

Is the quiet changelog a bug?

No. Quiet means nothing material moved. We don’t invent urgency so the homepage looks “alive.” Sticky risks still show what usually needs a person when the market is still.