Also called consent
An opt-in is a person's explicit agreement to receive messages from you, and under GDPR it must be given by a clear affirmative act.
Consent has to be freely given, specific, informed and unambiguous. In practice that rules out pre-ticked boxes, consent bundled into terms of service, and any design where agreeing is the only way to proceed with something unrelated.
Double opt-in adds a confirmation email that must be clicked before the address is added. It costs a share of sign-ups and buys a list of verified, genuinely interested addresses, better deliverability, and a timestamped record of consent — which is what a regulator asks for.
You must be able to show when and how each contact consented. Storing that alongside the address, at the moment of collection, is far easier than reconstructing it later.
In practice
A checkbox reading "Email me new template releases", unticked by default, next to a checkout button — separate from the purchase itself.
Common mistake
Adding buyers to a marketing list automatically. Purchase consent and marketing consent are legally distinct.
Read more on this
- Can You Sell Digital Products on TikTok Shop in 2026 Can you sell digital products on TikTok Shop? Learn the rules, limits, and the proven taap.bio workaround to get your digital store running today.
- 10 Link in Bio Tools for Creators in 2026 Compare 10 link in bio tools by selling, bookings, analytics, privacy, fees, and ideal users, plus a practical guide to choosing taap.bio.
- Linktree vs Beacons: Which Link-in-Bio Wins in 2026? Linktree vs Beacons compared in depth: pricing, fees, commerce, analytics, privacy, and creator fit, with a clear recommendation and where taap.bio fits better.
