PixelGuard is a Thunderbird extension that reports suspected tracking pixels, links, and external images when you open an email. It highlights suspicious items so you can decide whether to load remote content, and PixelGuard never interferes with Thunderbird's network behavior.
- Install the signed build from the official Thunderbird Add-on store (search for "PixelGuard") to ensure you receive the reviewed release.
- Contributors can clone this repository, build from source, and load the extension temporarily in Thunderbird for testing.
- Scans the displayed message HTML to spot 1x1/hidden images, suspicious tracking parameters, and externally hosted assets that typically leak engagement.
- Surfaces detections in a compact banner with quick actions such as allowing a sender/domain or opening the options panel.
- Keeps a per-sender whitelist so you can silence warnings from trusted contacts while still flagging others.
- Provides transparency only; remote content, images, fonts, and requests remain fully governed by Thunderbird's built-in remote-content controls.
If you need enforcement, rely on Thunderbird's controls (Message > Enable/Disable Remote Content) or another dedicated tool. PixelGuard focuses purely on detection so you can make informed decisions before loading anything external.
messagesRead,messageDisplay: read the currently displayed message context for analysis.storage: persist detection preferences and whitelists locally.
- Clone this repository and open the project folder.
- In Thunderbird, go to Tools > Add-ons and Themes > Debug Add-ons.
- Click "Load Temporary Add-on" and pick
manifest.jsonfrom this project. - Open an HTML email to see the PixelGuard banner with live detections.
- UI follows Thunderbird's selected language automatically.
- Included locales: English (US), English, Spanish, French, German, Greek, Russian, Chinese (Simplified).
- PixelGuard processes content locally only. No data leaves your device.
- Include icons in
icons/(16, 32, 48, 96, 128). - Run the helper script to create an
.xpi:powershell -ExecutionPolicy Bypass -File scripts/package.ps1- Output:
dist/PixelGuard-<version>.xpi - The script reads the version from
manifest.jsonand zips the staged files.
- Refined heuristics to catch more tracking techniques without false positives.
- Per-thread counters and history.
- Automated tests (Jest/Vitest with jsdom).
PixelGuard is free software licensed under the GNU General Public License v3.0 or later. See LICENSE for the standard GPL terms and NOTICE for the project copyright notice.