SendGrid

Overview

SendGrid, acquired by Twilio in 2019, is one of the largest email delivery platforms in the world, sending over 100 billion emails annually. It serves both transactional email (order confirmations, password resets, shipping notifications) and marketing email (newsletters, promotional campaigns). While SendGrid operates primarily as a backend API service, its email tracking features have direct implications for website consent management due to tracking pixels and link wrapping in delivered emails.

What This Script Does

SendGrid does not typically load JavaScript on websites. Its primary interaction with web browsers occurs through two mechanisms embedded in the emails it delivers:

Open tracking pixels: When enabled, SendGrid inserts a 1x1 transparent pixel image hosted at a SendGrid tracking domain (e.g., u12345678.ct.sendgrid.net or a custom domain configured by the sender). When the recipient's email client loads images, this pixel fires a request to SendGrid's servers, recording the open event with the recipient's IP address, user agent, and timestamp.

Click tracking links: SendGrid rewrites URLs in email bodies to route through its click tracking infrastructure. When a recipient clicks a link, the request passes through SendGrid's tracking domain before redirecting to the final destination. This records which links were clicked, when, and by whom.

Both mechanisms rely on the recipient's email client rather than website cookies. However, when click-tracked links direct users to the sender's website, the referrer header may reveal the SendGrid tracking domain, and UTM parameters appended to links enable web analytics platforms to attribute the visit to a specific email campaign.

If a website uses SendGrid's subscription management or preference center features, those pages load SendGrid-hosted forms that collect email addresses and consent preferences.

Consent & Compliance

SendGrid is classified as functional and marketing. Transactional email delivery is functional, while open/click tracking and marketing campaign features fall under marketing.

Under GDPR and the ePrivacy Directive, email tracking pixels constitute electronic communication monitoring. For marketing emails, consent is typically obtained through the email subscription itself (which should include disclosure of tracking). For transactional emails, adding open and click tracking may exceed what is strictly necessary for the service and could require a separate legal basis. The ePrivacy Directive's rules on electronic communications privacy apply to email tracking independently of cookie consent.

Under CCPA/CPRA, email engagement data (opens, clicks) constitutes personal information when linked to identified recipients. If this data is used for profiling or targeting purposes, it should be disclosed in the privacy policy.

Should You Block This Without Consent?

Conditional. SendGrid's transactional email delivery is functional and does not require consent. However, open tracking pixels and click tracking in emails operate in the marketing category. Website operators should evaluate whether their SendGrid implementation includes tracking features and ensure appropriate consent mechanisms are in place for marketing emails. On the website itself, SendGrid typically has no scripts to block — the consent considerations apply to the email channel configuration.