Mixpanel: What It Is and Why Block It
Mixpanel is an event-based analytics platform. Understand how it works, the 2025 security incident, and the limits of DNS blocking.
Drafted by automation from the sources listed at the end of this page, and reviewed before publishing. The sources are the part that matters: check them.
What is Mixpanel?
Mixpanel is a digital analytics company that tracks user interactions with web and mobile applications. Founded in 2009 by Suhail Doshi and Tim Trefren, headquartered in San Francisco, it has received investments from Y Combinator, Andreessen Horowitz, Bain Capital Tech Opportunities, and others. In 2021, it reached unicorn status with a valuation of $1.05 billion.
How does it work?
Instead of traditional metrics like page views, Mixpanel uses event-based analytics. It monitors specific actions such as button clicks, video plays, and sign-ups. The goal is to understand the user journey across devices and sessions, enabling segmentation, cohort analysis, funnel analysis, and retention tracking. To do this, it collects data like browser type, operating system, approximate location, and referrer URLs.
Why do privacy tools block it?
Mixpanel is a third-party tracker. By embedding its script, websites send information about user behavior to its servers. This allows Mixpanel to build user profiles for analytics, which constitutes tracking. Privacy tools, such as ad blockers and anti-tracking extensions, commonly block domains known to collect data without explicit consent. However, it is important to understand the limits of this approach.
Limits of DNS-based blocking
DNS blocking does not remove ads served from the same domain as the content, does not hide your IP (it only prevents connections to the domain), and may break website functionality that relies on integrated scripts. Even if you block Mixpanel, the site may still collect data through other means, such as first-party cookies or other third parties.
2025 security incident
In November 2025, OpenAI and CoinTracker disclosed an incident at Mixpanel. An attacker accessed part of its systems and exported limited customer data, including names, emails, approximate location, browser and OS details, referring websites, and organization/user IDs. No sensitive data such as passwords, API keys, payment information, chat content, or private keys were exposed. Mixpanel attributed the attack to SMS-based social engineering, revoked sessions, and hired forensic experts. In response, OpenAI and CoinTracker removed Mixpanel from their production environments and notified users.
Final considerations
Mixpanel is a legitimate analytics tool, but its tracking can impact privacy. Blocking can reduce data collection, but it does not eliminate all risks. If you use services that rely on this analytics, you may experience breakage. As an alternative, you can use a script blocker, such as hado99, which offers finer control over what runs in your browser.
In summary, knowing about Mixpanel helps you make informed choices. Remember that privacy is an ongoing process, and a combination of good practices and tools is ideal.