Restricted message statistics is an account-level privacy setting for organizations that want to measure how their emails perform without seeing which individual contacts opened them or clicked their links. It is designed for teams — such as universities, government bodies, healthcare organizations, and internal comms departments — whose privacy policies require that email engagement is reported in aggregate only.
How to get it
This feature is not available in account settings. To enable (or later disable) it on your account, contact Envoke support. It can be turned on per account, and applies to all users on the account.
What it does
With restricted message statistics enabled, opens and clicks are reported as totals and rates only. You can see how many contacts opened a message or clicked a link — but not who they were.
You can still:
See all aggregate statistics for every message: sends, opens, clicks, bounces, unsubscribes, open and click rates, link-by-link click counts, and report charts and trends.
Compare messages, view folder-level reports, and export aggregate report data.
See who a message was sent to, and see delivery-related contact lists: bounces and failure details, unsubscribes and preference changes, and skipped sends. Only open and click activity is treated as private engagement data.
See form submissions and all other contact activity that isn't email opens or clicks.
Use all contact management features that don't involve open/click data: profiles, custom fields, consent history, segments based on contact data, imports, and exports.
What's hidden or disabled:
Open and click drill-downs. Links such as "who opened", "who clicked", and per-link click detail lists are removed from message reports and dashboards.
Open and click columns in the contact list. Total opens, total clicks, last opened date, and last clicked date are not available in the contact list, in saved views, or in contact exports.
Email activity on contact profiles. A contact's timeline and message history do not show email activity.
Segments based on opens and clicks. You cannot create or run segments with conditions like "opened message X", "didn't open message X", or "clicked message Y". Segments based on sends or delivery status still work.
Sorting contacts by engagement. The contact list cannot be ordered by open or click activity.
Open and click webhooks. API webhook notifications for individual email opens and clicks are unavailable, so open/click data for identifiable contacts cannot leave Envoke through integrations. Other webhook types are unaffected.
These restrictions are enforced on Envoke's servers, not just hidden in the interface, and they apply to every user on the account regardless of their role or permissions.
What happens when the feature is turned on
Any saved contact-list views that included open/click columns will no longer show or export those columns.
Any existing segments that used open/click conditions will stop matching contacts based on those conditions.
Note that enabling the feature changes what is visible, not what is collected: Envoke still records opens and clicks in order to calculate the aggregate statistics in your reports.
Frequently asked questions
Does this affect email delivery or tracking accuracy? No. Messages are sent and tracked exactly as before; only the reporting of individual-level opens and clicks is restricted.
Can we still see who bounced or unsubscribed? Yes. Bounce, failure, unsubscribe, and preference-change lists remain available — the restriction applies specifically to open and click activity.
Can one user on the account keep access to individual engagement data? No. The setting applies account-wide to all users. If your organization needs per-user control, contact us to discuss your requirements.
Can we turn it off later? Yes — contact Envoke support. Once disabled, individual engagement data becomes visible again, including for the period the restriction was active.
Does it apply to the API? Yes. API endpoints and webhooks follow the same restriction as the application interface.