In France, tracking email opens needs its own consent
Do I need consent to use tracking pixels in emails in France?
In one sentence
In France, agreeing to get your email is not the same as agreeing to be tracked with an .
Emailrules interpretation
French guidance treats pixels as needing their own clear yes when used to optimise marketing. If someone never agreed to tracking, send the same email without the pixel — do not punish them by unsubscribing. Most cannot do per-person pixel-off easily; that gap is your problem, not a checkbox in settings.
Why it matters. EU brands (and anyone mailing France) risk non-compliance and ugly vendor surprises. Ask your in writing whether -free sends exist.
Dotted words open definitions. See how email actually works.
What to do
Your move — not a lecture
This one needs you
No platform does this for you. One concrete move, then you are done.
Part of it, on Klaviyo, since July 2026: you can mark named recipients as unsubscribed from , and their are then discarded rather than logged. Read what it does carefully — the pixel is still in the email and is still requested by the recipient's device. Klaviyo stops recording the open; it does not stop the read.
Your part: The itself, and the harder half of the obligation. Article 5(3) attaches to reading the recipient's terminal equipment, so a that still loads is still the regulated act even when nobody writes the result down. Capturing tracking consent separately from list consent is yours, and so is deciding whether discard-on-receipt is enough for your risk appetite or whether you need the image gone.
What to do first
If you are on Klaviyo, open the settings and check whether anyone has ever used the per-recipient control. If you are on anything else, ask your account manager in writing whether you can suppress the open pixel for a segment — their answer tells you whether this is a settings change or a six-month project.
You can skip this if: Nobody on your list is in France.
Who this applies to
Anyone emailing recipients in France, wherever the company sits. The obligation attaches to the recipient's terminal equipment, not to your registered office, so using an American changes nothing.
Checklist
- 01Ask for tracking separately from email consent, ideally in the signup form at the moment you capture the address.
- 02Make refusal one click, and honour it by sending the same email with no , not by unsubscribing them.
- 03Treat silence as refusal. A recipient who never answered has not consented.
- 04Never put a -requiring in the email that asks for consent. Mail clients pre-fetch images and will answer on the recipient's behalf.
Skip if
One narrow carve-out for list hygiene: you may measure strictly to stop emailing recipients. If you rely on it you may store only the date, day with no time, of the last known open, overwritten each time. Security and authentication flows are also exempt. Everything else, including optimising send frequency, needs .
That’s enough to act. The exact wording, the enforcement record and every primary source sit under Proof & sources, for counsel, bosses, or AI tools that need a citation. Not legal advice.
Proof
Exact position, enforcement, sources
For records and people who will check you. Skip if Monday’s move is already clear.
Source fact
to receive your email is not consent to be measured. If you drop an pixel for a French recipient in order to optimise campaigns, you need separate, specific permission for that. If they never gave it, you are expected to send the same email without the pixel.
What happens if you do not
No regulator has yet fined anyone specifically for an email . The obligation is real and the deadline has passed, and CNIL announced audits, but the enforcement record is currently empty. Treat this as a gap to close and evidence, not as an imminent fine. Note separately that the same discipline tracks with : Validity's 2025 benchmark found markets requiring show inbox placement about six percentage points higher than the US.
Sources
- CNIL, délibération n° 2026-042, Recommandation relative aux pixels de suivi dans les courriers électroniquesPublished 14 Apr 2026Read primary source
- EDPB Guidelines 2/2023 on the technical scope of Art. 5(3) ePrivacy Directive, v2.0Published 7 Oct 2024Read primary source
- Klaviyo, Email tracking pixel regulations (CNIL, Garante, and beyond): managing your open tracking settingsNo publisher dateRead primary source
History of this page
- Correction: this page said no mainstream ESP ships a per-recipient pixel-free send path. Klaviyo shipped per-recipient open-tracking control in July 2026 — you can mark named recipients as unsubscribed from open tracking. Read the help page and corrected the claim, but kept the distinction it turns on: Klaviyo discards the open server-side, the pixel is still requested by the device, and there is still no recipient-facing way to object.
- Transition period ended. Status moved from Upcoming to In force.
- Added after CNIL published the recommendation.
Related
Take this with you
GET https://emailrules.today/rules/france-email-open-tracking-consent?format=json
Same URL, same answer, every field including the ones behind the Proof tab. An Accept: application/json header on the plain URL does the same thing. All the endpoints.