Some webmail clients (and potentially other web communicators like online chats - FB messenger, etc) might pre-fetch all URLs send in the email or chat.
The pre-fetching will use the user's context (and cookies) because it's executed by the user's web browser.
The pre-fetching will use the user's context (and cookies) because it's executed by the user's web browser.