> If they added a text [...] then it would be ok. I’d agree with that as long as the text is visible before entering the email address, and the text also menti

> If they added a text [...] then it would be ok. I’d agree with that as long as the text is visible before entering the email address, and the text also mentions that email will be saved before completing the form. > I bet you will see at least 5 third-party tracking scripts Analytics and tracking scripts is a good point. Sometimes it’s implemented in a way where tracking scripts don’t have access to keystrokes, for example by iframing them, and you’d hope that the web site owner would care enough about their own security to do that. But you’re right that unfortunately it’s common. In this case I think we need some legal protection in the US and elsewhere similar to GDPR that clarifies that collecting such information can only be done with explicit consent.