---
title: "Email privacy · Agent Wranglers"
url: https://agentwranglers.se/playbook/email/email-privacy
updated: 2026-10-20
licence: "All rights reserved"
---

# Email privacy

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

> Send only what the message needs and track as little as you can. Opens are not reliable, so ask first, keep proof of consent and keep logs lean.

Email sits in inboxes for years and gets forwarded, so treat every message as something many people may read. In the EU, the GDPR and the ePrivacy rules also cover tracking pixels and links.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers email playbook: https://agentwranglers.se/playbook/email/email-privacy`.

## Required

- [Keep personal data out of links](https://agentwranglers.se/playbook/email/email-privacy/private-links): Never put email addresses, names or other personal data in link addresses or tracking parameters. Use a random reference instead.
- [Send only what the message needs](https://agentwranglers.se/playbook/email/email-privacy/email-data-minimisation): Put only the data each message needs into it, and keep sensitive data out of subject lines and previews.
- [Keep proof of consent](https://agentwranglers.se/playbook/email/email-privacy/consent-records): Send marketing email only to people who agreed to it, and keep a record of when, where and to what they agreed.
- [Keep email logs lean](https://agentwranglers.se/playbook/email/email-privacy/lean-email-logs): Log what you need to run and debug email, without full message bodies, and delete it on a set schedule.
- [Never email customers from test systems](https://agentwranglers.se/playbook/email/email-privacy/test-mail-capture): Outside production, send all mail to a capture server or to an allow list of test domains. Never deliver it to customer addresses.

## Recommended

- [Don't rely on tracking pixels](https://agentwranglers.se/playbook/email/email-privacy/tracking-pixels): Avoid tracking pixels, and never make a decision on open data alone. Where you do track opens, say so and get consent where the law asks for it.

- Previous: [Layout and accessibility](https://agentwranglers.se/playbook/email/layout-and-accessibility)
- Next: [Email security](https://agentwranglers.se/playbook/email/email-security)
- [All chapters](https://agentwranglers.se/playbook/email)