Hacker News new | ask | show | jobs
by sciencerobot 3808 days ago
I'm not sure if the privacy protection claims made by Gmelius are true.

The plugin claims that I am being tracked via tracking pixel (or other image) embedded in emails and that the trackers know when I read my email and where I read it from (from my IP address). Is this true? Google server attachments through a proxy. This would prevent trackers from seeing my IP address. If assets are cached or pre-downloaded by Google, then trackers wouldn't know when I read their emails either.

Gmelius might even decrease privacy. The plugin includes a JavaScript file hotlinked to inboxsdk.com. It's possible that inboxsdk.com is tracking users this way.

2 comments

Hi! Regarding your tracking remark, companies such as YesWare, MailTrack, MixMax (and so on) use pixel trackers. While such trackers are indeed made available through a Google proxy, the caching is overridable if you pass a no-cache header (http://blog.movableink.com/real-time-content-and-re-open-tra...). The Inbox SDK makes easier the interaction with Gmail's UI and does not transmit or index data.
We (Streak) also built the InboxSDK. One explicit goal was that we do not track user data. We do however track usage of certain SDK features but we log no PII info. Happy to answer any other questions about it.