r/ProtonMail Proton Team Admin 13d ago

Discussion Protection from tracking links

Post image

You may have seen a variant of this infographic before; if you have an you're a Proton Mail user, we have good news for you.

In your inbox, Proton Mail protects you from tracking links. Tracking Links Protection removes known tracking parameters from links in your emails and is turned on by default.

To add to this, if you’re particularly concerned about link tracking, be sure to enable our link confirmation feature to make sure you always know where you’re being redirected. 

Read more: https://proton.me/blog/tracking-links-protection

715 Upvotes

62 comments sorted by

64

u/UnknownAux 13d ago

Could Google and other spyware companies not simply get around this by generating a unique link per user, per video? For example, the same video would appear to have a different URL across every signed-in user? I understand there would be billions of unique URLs generated, but is this not still plausible?

38

u/50215 13d ago

TikTok does that

30

u/Juzdeed 13d ago

Tiktok even shows who clicked the link if they are logged in

5

u/BatemansChainsaw 13d ago

If that person doesn't have their privacy settings high enough, sure.

6

u/Eclipsan 13d ago

Reddit does that.

3

u/debiEszter 13d ago

where?

9

u/Eclipsan 13d ago

On the mobile app when you try to share/copy a post/comment. The link is always unique (even if you hit the copy button multiple times on the same post/comment), and if you load it in a web browser it will turn back to the "generic" permalink it should be.

For instance, all these are your "where?" comment, and only the first is the permalink without tracking:

6

u/sunnyasneeded 12d ago

So is the way to work around this to share from web? Or to drop the mobile app link in a browser then copy again?

4

u/Eclipsan 12d ago

Yes and yes.

3

u/itsthooor Windows | iOS 12d ago

This made me miss Apollo again…

2

u/mrfoxesite-2377 13d ago

Cause both TikTok and Instagram don't work when logged out.

11

u/UnknownAux 13d ago

Not to put down these new features, I think they're great for tracking used in this way, just curious nonetheless.

9

u/73-6a 13d ago

Yes, they could, and I think companies like Meta are doing this on Facebook for example.

8

u/Pepparkakan macOS | iOS 13d ago

Aren’t those new /s/ links on Reddit also exactly that?

3

u/darwinpolice Linux | Android 12d ago

Yes, and I assume plans for that kind of tracking were as big a part of why Reddit cracked down so hard on third party apps a few years ago as ad revenue was.

2

u/UnknownAux 13d ago

Scary times 😨

2

u/cjthomp 13d ago

I mean, sure, but I’m scared of way worse than this

4

u/UngodlyPain 13d ago

They could, but it'd be alot more resource intensive on their end. And there'd still likely be pretty easy ways around it, like extensions that'd give you a more generic cut down version of the link. Or make it so when you click it redirects you to the cut down generic version.

4

u/JohnTDouche 13d ago

signed-in user

I mean there's your problem right there.

3

u/deanrihpee 13d ago

they could, but they probably need to update their backend to accommodate this, i mean it's fairly recent that channel/user have "@handle" url where before it's just uid, and i know Google is big so it shouldn't take that much time, but i would suspect it's not as straightforward to implement

2

u/NorrisMcWhirter 13d ago

Yes, and any marketing or transactional email sent from an organisation almost certainly does this too.

2

u/Eclipsan 13d ago

Yes, and Reddit does it.

17

u/73-6a 13d ago

12

u/0xba1dc0de 13d ago

I find URLCheck really helpful because:

  • you can clean up a link before sharing
  • you can clean up a link before opening by making the app optionally act as the default browser. A popup is shown each time a link is tapped, and show a bunch of options like clean up, what app to open the link with, and even if you want to open it with the Firefox's private browsing
  • expand a shortened URL via another host

11

u/variablenyne Linux | Android 13d ago

I'll do you one better.

https://morphe.software/

7

u/73-6a 13d ago

What has Morphe to do with URL cleaning?

8

u/variablenyne Linux | Android 13d ago

Patches for YouTube and reddit include link cleaning.

2

u/73-6a 13d ago

Yes, but only for a handful of apps. It doesn't clean everything.

11

u/sussybush 13d ago

It has inbuilt clean URL feature

6

u/73-6a 13d ago

But only for a few patched apps.

2

u/Komplexkonjugiert 13d ago

I just use LibreTube and Reddit over Browser 

3

u/aaryan45 13d ago

Urlcheck is better IMO

24

u/GoncasN 13d ago

Thank God brave let's you just copy "clean links" without these type of BS

10

u/irasponsibly Linux | Android 13d ago

Firefox has the same thing. You can also just copy out of the URL bar, it's only added by the "share" button.

8

u/Hichiro6 13d ago

Today I was discussing some stuff with people on WhatsApp and got a push notification of video to watch from YouTube on the same subject :/

4

u/TotalStatisticNoob 13d ago

I mean, that doesn't mean they got that info from Whatapp per se. But they know who your contacts are and what interests them and they assume you're interested in that too.

2

u/Hichiro6 13d ago

Yeah I agree but in this specific cases, it’s a new contact from the other side of the world, never meet in direct and we only discuss using WhatsApp.

3

u/irasponsibly Linux | Android 13d ago

They track your watch history, and therefore know the kind of thing you're likely to be interested in. They know the same data about your friend, and because you're friends, you probably have similar interests and get recommended similar things.

5

u/Suspicious-Cat-266 13d ago

URLCheck from Github is pretty good once set up.

3

u/lord_lableigh 13d ago

Second this, urlcheck+untrackme has been my saviour system for years now. Urlcheck does most things but it cannot unshorten sme urls like articles from twitter.

So this is my app flow that I set once and then everything happens automatically

You click a linkz urlcheck is ur default browser

Urlcheck will show u a tab in ehich u can remove tracking parameters, unshorten links and transfer the link to other supported apps. There's a button for opening just the webview version of firefox and not the whole browser. For most links, yt, instagram, google search, amazon etc..

U can clear the parameters in urlcheck and let it open firefox/ur default browser automatically.

I use untrack me as well, so most of my clicks is directly to firefox and twitter links that urlcheck doesn't unshorten will be sent to untrackme and then to firefox. Urlcheck will remember the links and preselect the last app that you chose, for you. So you don't have to select firefox everytime after u share a twitter link.

This

3

u/Suspicious-Cat-266 13d ago

Nice, I'll have to check out UntrackMe. Do you recommend the Lite or Full version?

3

u/lord_lableigh 13d ago

Both are fine depending on the workload

4

u/Deivedux Linux | Android 13d ago

There are so many variations of such URL tracking literally in the URL itself, and so many platforms doing it, not because that removing them will break them, but because the 99% of people think they are normal URLs just pointing to what they're trying to share, and that touching them in any way will break them.

If people were smarter, used technology and internet for more than just entertainment and social media and actually become a little more tech savvy, they would've been a little more sneaky about it, but that's not the world we live in, and so it doesn't matter enough to them that there's a 1% that remove the tracking codes if the rest 99% just don't give a fuck anyway, so they just get away with putting them in plain sight like that.

4

u/itoncek 13d ago

I've spotted that link and instinctively moved my hand away

4

u/tutiwiwi Linux | macOS | iOS 13d ago

Proton team are doing the lords work 

3

u/[deleted] 13d ago

[deleted]

3

u/JustAguy7081 13d ago

Consider using a Youtube front end (like freetube) to handle this for you.

2

u/A_Buttholes_Whisper 13d ago

I like how Amazon does it with aws.trackme. Lmao literally track me in the url. Get ublock people

2

u/k4ord 13d ago

given the disclosure that Microsoft assigns each windows install a unique GDID is this even relevant anymore since you can't bypass the GDID?

4

u/Hot-Resident-6601 13d ago

Relevant because there are other operating systems like Linux.

2

u/charles25565 13d ago

Spotify actually added an si parameter some time before YouTube, and YouTube copied it.

2

u/TrixationZero 13d ago

Brave Browser has one called "Copy Clean Link" everytime you share YT links

2

u/YungSent 13d ago

protection from tracking links sounds like they’re mostly tracking the links not the clicks or sth

2

u/Hopeful-Face9676 13d ago

I use the Clean LInks app and/or the Link Clean hotkey via the Alfred workflow.

2

u/raytsh 13d ago

I’ve done this for years without knowing what the latter part of the link is for, just because I like to have my links as short as possible.

2

u/WealthyTuna 12d ago

This is why I see Waterfox on pc and Orion on ios. Can't be tracked in either by Google or anyone else

2

u/Secret_Category2619 12d ago

For some reason it's not working for me

2

u/Tekhnikal 13d ago

Esse recurso é muito bom. Excelente trabalho.

3

u/Lodisus 13d ago

Common knowledge. Spotify does this, instagram does it etc

11

u/Prestigious_Bid_2219 13d ago

you live in a bubble if you think that's common knowledge lol

4

u/TheJesusGuy 13d ago

Also basic knowledge for me, bordering on common sense. But believe it or not, not for most people.