The privacy tradeoffs of free signups, explained
When a service asks for your email to unlock something free, you are trading something. The trade can be fair or unfair. Knowing what is in the trade makes the choice easier.
What a free signup usually costs
When you give your email to a free service, you may be agreeing to a list of things you did not read. Common items include:
- Marketing emails from the service.
- Marketing emails from the service's partners.
- Tracking cookies and similar tools that follow you on other sites.
- Sharing your data with analytics, advertising, and customer data platforms.
- Sharing or selling your data to data brokers, in some cases.
The terms can be in the privacy policy. Few people read it. Most policies are long and written in legal style, so the cost can hide in dense text.
Why services want your email
An email address is one of the most valuable bits of contact data online. It lets a service:
- Reach you with offers and promotions over months and years.
- Build a user profile across multiple visits.
- Match you to other lists, so they know more about your interests.
- Sell or share that profile with partners or data brokers.
Email is a long lived identifier. Unlike a cookie, which you can clear, your email tends to follow you between devices and accounts. That is exactly why advertisers value it.
The good, the okay, and the bad
Not every signup is the same. Here is a rough split:
- Good. A clear value exchange, a single use of your email, an honest unsubscribe, and a clear privacy policy.
- Okay. Some marketing emails after signup, but easy to opt out.
- Bad. A wall that demands your email for a small download, plus auto enrolled marketing, plus data sharing with many partners, plus a hard to find unsubscribe link.
Most internet users meet a bad signup more often than they would like.
How to read a privacy policy quickly
You do not have to read the whole thing. Search the page for a few words:
- Share. Look for who they share data with.
- Sell. Look for whether they sell your personal information.
- Partners. Look for the size of the partner network.
- Marketing. Look for whether opt out is automatic or you need to ask.
- Retention. Look for how long they keep your data after you stop using the service.
If the answers are alarming, do not sign up with your real email.
Smart defaults to protect yourself
- Use a disposable inbox for one off signups.
- Use an alias for any signup you might want to keep.
- Uncheck marketing boxes during signup, even when the page makes them easy to miss.
- Use a password manager so you can use unique credentials per site.
- Use a tracker blocker in your browser to limit third party tracking.
- Review your subscriptions every few months and unsubscribe from any you no longer read.
What strong privacy laws actually give you
In the European Union, the GDPR gives you the right to access, correct, and delete your personal data, and to object to certain uses. In California, the CCPA and CPRA give residents similar rights, including the right to opt out of the sale or sharing of personal information. Other states and countries have similar rules.
These rights are useful, but you have to use them. A service will not delete your data on its own. You have to ask, often through a privacy or data request page on their website.
When a free signup is worth it
Plenty of free signups are honest and useful. Newsletters, free trials, communities, and forums work well when both sides know what they are agreeing to. The point is not to never sign up. The point is to know what you are paying with.
A small toolbox of an alias, a disposable inbox, a tracker blocker, and a habit of unchecking the marketing box is enough to keep most casual signups fair.