Apple Mail Privacy Protection and Solo Ads: What to Trust

Apple Mail Privacy Protection (MPP) makes open rates unreliable for solo ads. It loads tracking pixels automatically, so a vendor's report can show opens that no human ever made. Clicks still get recorded, so judge a solo ad by tracked clicks, opt-in rate and what happens after the opt-in. Never judge it by opens alone.

This matters because many sellers still quote open rates as proof of list quality. If you know what MPP does to that number, you can ask better questions and stop paying for numbers you can't check.

TL;DR

• MPP pre-loads tracking pixels, so Apple Mail opens can be recorded even when nobody read the email.
• An inflated open rate is not proof of fake traffic, and a high one is not proof of a good list.
• Clicks, opt-in rate, cost per lead and earnings per click are the numbers to rely on, measured on your own tracker.
• Do not ask recipients to turn MPP off. Fix your measurement instead.
• Before buying, run a small test and verify it with your own click tracking and analytics.

Table of Contents

• What Mail Privacy Protection does to a solo ad
• How it distorts the numbers a vendor sends you
• Should you turn off Mail Privacy Protection to get accurate tracking?
• Metrics that still work
• A verification routine that doesn't depend on opens
• What to say to a vendor who quotes open rates
• Fixing your own email setup after MPP
• Perspective
• Ready to buy? Verify first, then spend
• FAQ
• Sources

What Mail Privacy Protection does to a solo ad

A solo ad is a single email, sent by a list owner to their subscribers, with one call to action: your link. The vendor reports how many people opened it and how many clicked. Opens are measured by a tiny invisible image, a tracking pixel, that loads when the email is displayed.

MPP changes what that load means. Mailchimp's documentation explains that Apple pre-fetches email images and tracking pixels, so they trigger whether or not the recipient opens the email. That makes traditional open metrics inflated and unreliable. The same page notes that MPP hides contacts' IP addresses and blocks accurate location, device type and email client identification.

Apple's own support page describes the feature from the user's side: it hides the IP address and keeps senders from seeing whether a message was opened. It also says MPP does not extend to links or attachments. That last detail is the reason clicks remain your best evidence.

MPP is something each user switches on in the Mail app settings. It arrived with iOS 15, iPadOS 15 and macOS Monterey, according to Klaviyo's help center. A list that skews toward iPhone users, which is common in the US, can show a large share of machine-generated opens.

How it distorts the numbers a vendor sends you

Three things go wrong when you read a solo ad report built on opens.

1. The open rate looks better than reality. Pixel loads by Apple's servers count as opens. Mailchimp says this can distort metrics that depend on opens, such as clicks per unique open.
2. You can't tell human opens from machine opens. Klaviyo says that some platforms label Apple Privacy Opens separately, but the platform cannot tell whether a given pixel load was a genuine human open.
3. Location and device data is masked. If a vendor tells you their opens came from a certain city or device mix, MPP users make that claim hard to support.

None of this proves a vendor is lying. It does mean an open rate cannot back up any claim about list quality. Treat it as a number with no verification behind it.

Does MPP make solo ad traffic look like bots?

Not on the click side. Twilio's SendGrid documentation states that for contacts using Apple Mail, click activity and click rates are still reported. Clicks happen when someone taps your link, and Apple does not pre-click links.

That does not make clicks automatically clean. Security scanners at some email providers and companies can open links in a message before the recipient sees it. And a bad actor can generate clicks that never came from a person. So a click in the vendor's report is a claim, and a click in your own tracker is evidence. We cover that gap in more detail in our guide to solo ad click fraud prevention.

Should you turn off Mail Privacy Protection to get accurate tracking?

No. MPP is a setting on the reader's device, and you are not in a position to change it. A solo ad goes to someone else's list, and their subscribers chose their own privacy settings. Asking them to disable it would be impractical, and it would be a poor way to treat people who gave their attention to an email.

The practical answer is to stop depending on the signal MPP broke. Apple's feature does not touch the clicks recorded by your tracking link or the opt-ins recorded by your form. Build your evaluation on those. Mailchimp's guidance points the same way: use clicks, source performance and double opt-in signup forms rather than relying only on opens.

Twilio's blog recommends treating click activity as the primary indicator of email engagement now that open data is less reliable. The Mangione Group's guidance on measuring email beyond opens goes further. It treats an open as a remote-content event, not proof of reading, and suggests reducing the role of opens in any consequential decision.

For a solo ad buyer, "consequential decision" means whether you reorder from a vendor, and how much you spend next time.

Metrics that still work

Here is a working set, from the least to the most informative for a buyer.

The first row is the one many sellers lead with. The bottom rows are where you decide if the traffic was worth it. Your own numbers will differ by niche and offer, and we won't promise any particular return.

Measure the visit, not just the click

Google's advertiser resources note that clicks and visits measure different things and may not match. They recommend URL tracking or auto-tagging with analytics to identify campaign traffic. For solo ads, that means a unique tracking link per vendor and per test, so the traffic from each source stands apart in your reports.

A gap between clicks and landing page visits is normal to some degree. A large gap is a question for the vendor. Look at it alongside session length, scroll behavior and bounce patterns. Our walkthrough on how to track solo ad traffic shows the setup step by step, and click tracking explained for affiliate marketers covers the vocabulary.

A verification routine that doesn't depend on opens

Use this before and during every test with a new source. Our full 21-Question Vendor Vetting Framework goes deeper, but this is the core.

1. Ask how the traffic is sent. Google's traffic provider checklist tells buyers to find out how a provider sends traffic, what kind it is, where ads appear, and whether detailed source reports and example URLs are available. Those questions work for solo ads too.
2. Ask for click logs, not a screenshot. Request timestamps, IP data and user agents where the vendor can provide them. See our buyer's guide to solo ad click logs.
3. Start with a small test. The same Google checklist advises monitoring a small test yourself and turning off sources that send unexpected traffic or raise quality concerns. Buy the smallest quantity that gives you a readable sample.
4. Use your own tracker with bot filtering on. Route every click through a tracking link you control, so the count of unique clicks comes from your system, not the seller's.
5. Compare vendor numbers with yours. If the seller reports 500 clicks and your tracker shows far fewer unique visitors, ask why before you do anything else.
6. Read the pattern in the traffic. Human visitors arrive at irregular intervals and spend uneven time on a page. Perfectly uniform timestamps or instant bounces are worth investigating. Device fingerprinting and IP filtering can help you separate real visitors from repeat or automated hits.
7. Judge the opt-ins. Count confirmed subscribers, and watch whether they click your first few emails. A double opt-in form filters out many fake signups.
8. Decide using thresholds you set in advance. Write down the cost per lead or earnings per click you need before the test starts, so a good-looking open rate can't change your mind afterward.

If you want a plain definition of the problem itself, we explain it in what click fraud means in digital ads. If a vendor disputes a charge, proof of clicks shows how to match logs to what you were billed for.

What to say to a vendor who quotes open rates

You do not need to be confrontational. Try these questions:

• "What share of your list is on Apple Mail, and how do you treat Apple pixel loads in your reports?"
• "Can you share the click timestamps for my send?"
• "Will you accept a small test with my own tracking link?"
• "What opt-in rate and click-to-visit ratio do buyers usually see from your list, and how is that measured?"

A seller who is comfortable with scrutiny will answer plainly. A seller who dodges the question and repeats the open rate gives you useful information too. Note that a vendor's own claims are not evidence. What counts is what your tracker records.

Fixing your own email setup after MPP

MPP affects you as a sender as well as a buyer. Once your new subscribers arrive, any automation that fires on an "opened" event can trigger for people who never saw the message. Examples include a sequence that moves a subscriber to a "warm" segment after an open, or a cleanup that removes people who never opened.

Switch those triggers to clicks, replies or on-site actions. If you run a lot of sequences, a marketing automation checklist is a handy way to audit which flows depend on opens. Also check whether your email platform separates Apple Privacy Opens from other opens, and exclude them from reports where it lets you.

Deliverability is a separate issue, and it matters as much as measurement. Fake opens can make an unengaged list look healthy, which is one more reason to track real engagement.

Perspective

We have sold and bought traffic long enough to say this plainly: open rates were never a good way to judge a solo ad, and Apple just made that obvious. Even before MPP, an open was a pixel load, and pixel loads can be gamed, blocked or preloaded.

The better habit is the one we teach in everything on this site. Track every click on a link you control. Verify the visits in your own analytics. Vet the vendor with questions before you spend, and run a small test before you scale. Those steps cost little and they work no matter what Apple, Google or any email provider changes next.

We don't make income or ROI promises, and you shouldn't accept them from anyone selling traffic. What we can say is that a buyer with a tracker, a checklist and a written threshold is much harder to burn than a buyer who trusts a report.

Philip Coble

Ready to buy? Verify first, then spend

If you have decided to test solo ad traffic, set up your tracking first, then run the 21 questions against any source you consider. When you're ready to place a small test order, our page on how to buy solo ads traffic explains the process, and you can look at the tracked ordering option we recommend.

Once the new subscribers start arriving, protect your sending reputation too. Our guide on warming up your email domain walks through the setup. For more on the verification side, start at the Soloadsguide home page.

FAQ

Is Apple Mail Privacy Protection a good thing?

For readers, yes: it hides their IP address and limits what senders can learn about their email habits. For marketers, it removes one unreliable signal and pushes everyone toward more honest measurement. Clicks, opt-ins and sales are better evidence than opens anyway.

Should I turn off Mail Privacy Protection?

If you are a reader, that is your choice, and the setting lives in your Mail app's privacy options. If you are a solo ad buyer, you can't change it for someone else's subscribers, so don't plan around it. Track clicks on your own link instead.

Does MPP mean my solo ad clicks are fake?

No. Clicks are still recorded for Apple Mail users, and MPP does not extend to links. But security scanners and bots can still produce clicks, so verify them with your own tracker, click logs and landing page behavior.

Can a vendor's open rate prove list quality?

No. With MPP, a pixel load can be recorded even when nobody read the message, so a high open rate says little about who is on the list. Ask for click logs and run a small tracked test instead.

Sources

• Apple Mail Privacy Protection (MPP) FAQs, Mailchimp
• How to configure custom reports to track Apple Mail Privacy Opens, Klaviyo
• Understanding Apple Mail Privacy Protection and Open Events, Twilio SendGrid
• Guide to Apple Mail Privacy Protection (MPP) and iOS 18, Twilio
• How to Measure and Test Email Beyond Opens, The Mangione Group
• Use Mail Privacy Protection on iPhone, Apple Support
• Resources for Advertisers, Google Ad Traffic Quality
• Traffic provider checklist, Google Ad Manager Help

Recommended

• Do Solo Ads Damage Sender Reputation? A Buyer's Risk Guide
• Before You Buy Solo Ads: Verify DKIM and SPF With a Test Email
• Affiliates: 21 Question Vendor Vetting to Protect Solo Ad Deliverability
• Solo Ad Network Compliance: 3 Checks Before You Pay