@huloglobal/vendure-plugin-email-tracking

Track delivery, opens and clicks on every transactional email a Vendure server sends. Wraps @vendure/email-plugin, persists every send + open

• click in dedicated tables, hashes IPs, suppresses bounced recipients automatically, exports CSV — and ships an admin UI to audit the trail per customer / order / invoice.

Maintained by Wayne Garrison.

Buy

7-day free trial then £9.95/month subscription, or £199 one-off lifetime at elite.charity/licence/buy/vendure-plugin-email-tracking.

Install

yarn add @huloglobal/vendure-plugin-email-tracking

import {
    EmailTrackingPlugin,
    TrackingEmailSender,
} from '@huloglobal/vendure-plugin-email-tracking';

export const config: VendureConfig = {
    plugins: [
        EmailTrackingPlugin.init({
            publicBaseUrl: 'https://shop.example.com',
            licenceKey: process.env.HULO_LICENCE_KEY_EMAIL_TRACKING,

            // -- Security (recommended in production) --
            signingSecret: process.env.HULO_EMAIL_SIGNING_SECRET,
            bounceWebhookSecret: process.env.HULO_BOUNCE_WEBHOOK_SECRET,
            clickRedirectAllowedDomains: ['shop.example.com', '*.example.com'],
            hashIpsInHistory: true,            // default true
            ipSalt: process.env.HULO_IP_SALT,  // recommended in prod
            rateLimit: { capacity: 60, windowMs: 60_000 },

            // -- Retention (opt-in) --
            retention: { days: 365, maxRows: 5_000_000 },
        }),
        EmailPlugin.init({
            // ... your existing email-plugin config ...
            emailSender: new TrackingEmailSender(),
        }),
    ],
};

Then add the UI extensions to your compileUiExtensions config:

EmailTrackingPlugin.uiExtensions

Feature tour

Universal capture

Every email produced by @vendure/email-plugin (order confirmation, password reset, OTP, invoice, etc.) is logged automatically — no per-handler wiring. Inject EmailTrackingService for ad-hoc sends from your own plugin code and get the same engagement tracking.

Open + click tracking with full history

• 1×1 pixel at /email-track/open/:token.gif — when signingSecret is configured, the token is <id>.<hmac> and forged ids are rejected.
• Click redirector at /email-track/click/:token?u=… — skips mailto:, tel:, #-anchors, and unsubscribe/opt-out links. Optional clickRedirectAllowedDomains denies open-redirector abuse.
• Per-row history of the last 50 opens and clicks. Each entry includes timestamp, IP (raw or hashed), parsed email client (Gmail web, Outlook desktop, Apple Mail iOS, Thunderbird, …), bot flag for prefetch proxies, and best-effort country / city via MaxMind GeoLite2 (when installed via the visitor-analytics plugin or directly).

Suppression list

• New EmailSuppression entity. Hard bounces and complaints auto-populate; sendTracked() refuses suppressed recipients and writes status='suppressed' rather than calling SMTP.
• Admin CRUD at GET/POST/DELETE /email-track/suppression.

Per-template analytics

• GET /email-track/log/stats/by-template?fromDays=30 returns open rate, click rate and click-to-open per email type.

Bounce webhook

• POST /email-track/bounce with { messageId, status, reason }.
• Verifies X-Signature (HMAC-SHA256) against bounceWebhookSecret or signingSecret. Postmaster integrations stay loose-coupled.

Admin UI

• Global Email Log page with status totals, filter row, paginated list, expand-row detail showing both the open and click history tables with location + device + client per row.
• Per-customer Emails tab filtered to that customer.
• Update banner when a new plugin version is published to npm.

CSV export

• GET /email-track/log/export.csv?status=sent&from=2026-05-01 — same filters as the list endpoint, up to 50 000 rows.

Privacy + safety

• hashIpsInHistory: true (default) stores SHA-256 hashed IPs.
• All admin endpoints get security headers via the licence-sdk helper.
• Rate limiter on every public endpoint (default 60/60s per IP).

Opt-in retention

retention: { days: 180, maxRows: 1_000_000 }

Sweeper runs once a day, drops the .unref() flag so it never blocks shutdown, and silently fails over on DB hiccups.

HTTP endpoints

| Method | Path | Auth | Purpose | | --- | --- | --- | --- | | GET | /email-track/open/:token.gif | public | tracking pixel | | GET | /email-track/click/:token?u=… | public | click redirector | | POST | /email-track/bounce | HMAC | bounce / complaint webhook | | GET | /email-track/log | admin | paginated list with filters | | GET | /email-track/log/summary | admin | status totals tile | | GET | /email-track/log/:id | admin | full detail incl. opens + clicks | | GET | /email-track/log/stats/by-template | admin | per-template aggregates | | GET | /email-track/log/export.csv | admin | CSV export | | GET | /email-track/suppression | admin | list suppressions | | POST | /email-track/suppression | admin | add a suppression | | DELETE | /email-track/suppression/:recipient | admin | lift a suppression | | GET | /email-track/status | admin | version + licence + update status |

Lost your licence key?

Re-send every active key on file at elite.charity/licence/forgot.

Documentation

User manual + screenshots: huloglobal.com/vendure-plugins/email-tracking/docs/

Licence

Commercial. Buy at elite.charity/licence/buy/vendure-plugin-email-tracking.