Mandrill

Overview

Mandrill is the transactional email API operated by Mailchimp (Intuit), designed for high-volume sending of automated, triggered emails: password reset notifications, order confirmations, account alerts, and shipping updates. Mandrill provides deliverability infrastructure, template rendering, and sending analytics for application-triggered email flows. Its browser-side presence is limited to open-tracking pixels embedded in delivered emails.

What This Script Does

Mandrill operates server-side (API calls from the application backend to Mandrill's SMTP/API endpoint). Its direct impact on end-user browsers is limited to:

Email tracking pixels:

• When Mandrill's open tracking feature is enabled, delivered emails contain a 1×1 tracking pixel loaded from mandrillapp.com or a custom tracking domain
• When the recipient opens the email, their client loads the pixel, which logs the open event (timestamp, IP address, and user agent) in Mandrill's delivery analytics
• Mandrill records this data for email deliverability analytics accessible to the sending application operator

Click tracking (if enabled):

• Links in Mandrill emails may be wrapped in tracked redirect URLs
• When a recipient clicks a link, the request is logged by Mandrill and then redirected to the original destination

No browser-side scripts are embedded on third-party websites by Mandrill. The tracking described above occurs in email clients, not web browsers navigating to your site.

Consent & Compliance

• Consent Category: Essential
• GDPR/ePrivacy: Transactional emails (password resets, order confirmations) are essential communications; their delivery is lawful under GDPR Article 6(1)(b). The open-tracking pixel in transactional emails is a gray area — ePrivacy cookie rules apply to browser storage, not email clients, but GDPR still requires a lawful basis for collecting IP and device data via pixel. For transactional emails, this is generally accepted under legitimate interest for delivery analytics.
• CCPA: IP address and device data from email open tracking is personal information. Mandrill acts as a service provider for transactional email sending.

Should You Block This Without Consent?

No. Mandrill delivers transactional emails essential to site operation (account creation confirmations, password resets, order notifications). There is nothing to block at the website level — Mandrill does not embed scripts on web pages. Review your Mandrill account settings to configure open-tracking behavior that aligns with your privacy commitments for email recipients.