It appears that the tracker always sends emails using $CFG->lang as the language whereas in fact it should be using the preferred language set by the user, if it is set. If it is not set, it should be using the session language. $CFG->lang should be the last resort.