5 ms·

I have done the opposite We had a million people enter their email over the last decade We haven’t messaged a single one. Now we plan to start sending out a ne

by EGreg 6mo ago

I have done the opposite We had a million people enter their email over the last decade We haven’t messaged a single one. Now we plan to start sending out a newsletter. For many, they may have forgotten downloading the app, but they might still appreciate it. If not - they can u subscribe.

hsbauauvhabzb 6mo ago
So you’re retrospectively assuming consent? Gross.
- htnthrow11220 6mo ago
  Complete assumption on your part.
  - hsbauauvhabzb 6mo ago
    It was a question with an assumed answer which I think is pretty likely. It wasn’t presented as fact. I think at this point it’s pretty reasonable to assume the worst of email marketers, and I don’t care if you think otherwise :)
    - htnthrow11220 6mo ago
      Sure. I took it as I think you intended - a statement of your understanding. I guess I just was irritated in, the moment as people are constantly reacting to unverified assumptions when there are many real things to react to. Apologies if I added to the pile of annoying things on the internet for you!
      - hsbauauvhabzb 6mo ago
        You’ve made an unverified assumption and are reacting to it.
- EGreg 6mo ago
  No, the consent was given, recorded, and never acted upon. It had no expiration date. Many of those people are still using the app today.
  - williamdclt 6mo ago
    > It had no expiration date - non-legally speaking, consent for anything is never illimited in time. So whatever the law says, you're probably doing a dick move, I'm sure you can conceive that most people you're going to email would rather not get this email and you're planning to do it anyway. So if you act against these people's interest, don't be surprised if they react negatively (reporting the email as spam, complaining, reporting you to authorities) - legally speaking... IANAL, but I don't think that you're correct that you have a legal basis to have kept this data, and even less to use it for marketing purposes. I don't think that you'd win the argument that the consent is still "informed" after many years of not hearing from you. If a reasonable person would no longer expect to hear from this company, then I don't think you still have consent under GDPR (could be wrong, IANAL)
    - EGreg 6mo ago
      So basically — you are affirming the point of the OP whose article was shared. Wait too long — respect people’s attention and time so much that you don’t send them anything unless it is ready and benefits them - and apparently it’s spam when you finally do contact them. Meanwhile, if you were just drip feeding them slop once a month, then you’re fine. I happen to agree with the article author, the email ecosystem is totally broken, that’s far more of a problem than small teams who have well-meaning intentions and respect for their users’ time. You’re blaming the victim, rather than the email system that’s open to SPAM and dominated by gmail.
  - AlexandrB 6mo ago
    Most consent doesn't work like this in people's minds (never mind what you "recorded"). I'd be furious and immediately flag as spam and review the app 1 star (if possible) for good measure.
gpvos 6mo ago
Don't do that, it will be disastrous for you. Instead, send them a politely worded one-time announcement with an invitation to subscribe. Clearly mention that if they don't, this is the last mail they'll get from you, and keep that promise by deleting their address. You'll still get some pushback, but I think most people would find that acceptable.
- mrweasel 6mo ago
  At least with your suggestions there's some chance that their newsletter won't instantly get flagged as spam. I'd do what you suggest, but send the newsletter from an separate domain once subscriptions have been confirmed.
  - EGreg 6mo ago
    That one-time announcement is called an email. And therefore that first announcement itself can be flagged as spam. And naturally, unless they click a link in the first email, gmail should consider anything subsequent to be spam anyway. They have no idea whether consent happened somewhere else or not. The unsubscribe links must work without even opening the email, according to gmail rules.
    - zephen 6mo ago
      As a gmail user who may or may not have had to enter an email address to do something on the web, and who gets annoyed by spam, let me describe my decision points (anecdote is not the plural of data, of course, but here I am) when it comes to "unsubscribe" vs marking something "spam." If your email reminds me (upfront!) how and when and why I specifically gave you (and not some other third party) my email address, and promises that you are advertising this newsletter one time, and it is opt-in, and you keep your promise, I am highly unlikely to mark it spam. Now, this presupposes that it was really me who gave you my email address. I have a fairly generic email address because I got on gmail early. There are many variants of it, but sometimes people forget to add the trailing numbers or letters, so I get misdirected email all the time. If the misdirected email is personal, I usually respond letting them know of the issue. If the misdirected email shows a clear understanding that I might not have been the one who really signed up then I give them a pass. If the misdirected email blithely assumes that I am the one who signed up, then I blithely assume that its senders are too fucking stupid to use the internet and it goes straight into the spam bucket. (And this is usually an easy call because they use the name of the person with the similar email address, which is not my name. My email address is firstinitiallastname@gmail.com and there are many different first names that start with the same initial.) Any failure on any of those other points starts to increase the likelihood of it being marked spam, and... > The unsubscribe links must work without even opening the email, according to gmail rules. So here's where I'm a hard-ass and maybe even worse than google's rules. If I see the RFC8058 unsubscribe link, it is too late. I only notice that link after I've decided to mark your email as "spam" and google asks if I'm sure, or if I merely want to unsubscribe. Why did I decide to mark your email as spam? One possible reason is that I read through it, decided that the sender legitimately had my email address and was acting honorably, and then clicked the unsubscribe link embedded in the email. When I do that, one of two things happens. Either I get some form of "thank you, you've been unsubscribed" or nothing happens because the sender assumes that I am OK with them executing javascript on my computer. This is a privilege I jealously guard and only reluctantly offer to as few websites as possible. Even if I previously gave you my email address, that did not come with an open invitation to use my computing resources for your own purposes.
kolektiv 6mo ago
> over the last decade Be aware that under various regulations, you're potentially already at risk of accusation in terms of unwarranted data retention. If you haven't got a good reason to have kept those email addresses, something like the GDPR might not interpret that favourably. While the GDPR doesn't specify actual time limits, they are expected to be proportionate. Financial records are generally 7 years unless otherwise legally required, so for a decade, you would be saying that these email addresses are more critical/valid than that. That may be the case, I don't know your business, but be careful if you don't want some very awkward questions asked. Just the hassle of having to deal with complaints you might get (and various regulators would take notice of 1 million instances) is likely to be more than it's worth for most. The suggestion downthread to send a very clear "we still have your address, would you like to opt in to this newsletter, otherwise we'll remove it" is not a bad one, but even then, some people will object to you still having it at all.
- EGreg 6mo ago
  People originally opted in and provided it expecting to get a newsletter on how to use the app. We never seemed to have the bandwidth to create a good enough one, so we never sent it. We kept improving the app until it became very good and still never sent the emails. But retained the addresses, so that one day we could tell people the app has improved, to give it a try, include animated GIFs of it in action and gradually educate them on ways to use it. For that I get chastizement on HN, figures. Yes, there is a clearly valid business purpose under GDPR for retaining the email addresses of users who want to learn how to use your app better and opted in. If you plan to send a newsletter out. Other than those voluntarily entered emails (which aren’t even linked to the user), we haven’t retained literally any information about our users, despite having millions of users download and use the app over a decade. Which is far beyond pretty much any social app I know. But almost no one actually cares.
  - kolektiv 6mo ago
    > For that I get chastizement on HN, figures. I really wasn't trying to chastize, honestly it was intended as a friendly dollop of advice as someone who's dealt with this kind of thing. But since you have replied, I would say: > Yes, there is a clearly valid business purpose under GDPR for retaining the email addresses of users who want to learn how to use your app better and opted in. Relevance is likely to be seen as contextual. Someone wishing to do something a full decade ago is not likely to be seen as sufficient evidence to justify contacting them now in case they still wish to. That's a big chunk of the point about time-limiting data retention - the data gets less relevant and more problematic over time. I get that you're not trying to colour outside the lines here, but from the perspective of your users, and anyone looking at their potential complaints from a regulatory perspective, the window in which they reasonably consented to contact has closed (and probably some time ago). The regulations are there, ostensibly, to protect consumers. They will be interpreted in that light. I can almost guarantee that if you sent an email to your downloader base 10 years after they last heard from you, being ignored will be the best case, and the worst will be reports to local regulators.
Macha 6mo ago
My reaction would be to report spam with a vengeance
bandrami 6mo ago
Oh my God don't do that
QuercusMax 6mo ago
What percentage of those million still use your app? What percentage of those million remember the existence of your app? Unless you're sure both of those are VERY high, you would be an absolute imbecile to spam them.

by EGreg 6mo ago

hsbauauvhabzb 6mo ago

So you’re retrospectively assuming consent? Gross.

htnthrow11220 6mo ago
Complete assumption on your part.
- hsbauauvhabzb 6mo ago
  It was a question with an assumed answer which I think is pretty likely. It wasn’t presented as fact. I think at this point it’s pretty reasonable to assume the worst of email marketers, and I don’t care if you think otherwise :)
  - htnthrow11220 6mo ago
    Sure. I took it as I think you intended - a statement of your understanding. I guess I just was irritated in, the moment as people are constantly reacting to unverified assumptions when there are many real things to react to. Apologies if I added to the pile of annoying things on the internet for you!
    - hsbauauvhabzb 6mo ago
      You’ve made an unverified assumption and are reacting to it.
EGreg 6mo ago
No, the consent was given, recorded, and never acted upon. It had no expiration date. Many of those people are still using the app today.
- williamdclt 6mo ago
  > It had no expiration date - non-legally speaking, consent for anything is never illimited in time. So whatever the law says, you're probably doing a dick move, I'm sure you can conceive that most people you're going to email would rather not get this email and you're planning to do it anyway. So if you act against these people's interest, don't be surprised if they react negatively (reporting the email as spam, complaining, reporting you to authorities) - legally speaking... IANAL, but I don't think that you're correct that you have a legal basis to have kept this data, and even less to use it for marketing purposes. I don't think that you'd win the argument that the consent is still "informed" after many years of not hearing from you. If a reasonable person would no longer expect to hear from this company, then I don't think you still have consent under GDPR (could be wrong, IANAL)
  - EGreg 6mo ago
    So basically — you are affirming the point of the OP whose article was shared. Wait too long — respect people’s attention and time so much that you don’t send them anything unless it is ready and benefits them - and apparently it’s spam when you finally do contact them. Meanwhile, if you were just drip feeding them slop once a month, then you’re fine. I happen to agree with the article author, the email ecosystem is totally broken, that’s far more of a problem than small teams who have well-meaning intentions and respect for their users’ time. You’re blaming the victim, rather than the email system that’s open to SPAM and dominated by gmail.
- AlexandrB 6mo ago
  Most consent doesn't work like this in people's minds (never mind what you "recorded"). I'd be furious and immediately flag as spam and review the app 1 star (if possible) for good measure.

gpvos 6mo ago

Don't do that, it will be disastrous for you. Instead, send them a politely worded one-time announcement with an invitation to subscribe. Clearly mention that if they don't, this is the last mail they'll get from you, and keep that promise by deleting their address. You'll still get some pushback, but I think most people would find that acceptable.

mrweasel 6mo ago
At least with your suggestions there's some chance that their newsletter won't instantly get flagged as spam. I'd do what you suggest, but send the newsletter from an separate domain once subscriptions have been confirmed.
- EGreg 6mo ago
  That one-time announcement is called an email. And therefore that first announcement itself can be flagged as spam. And naturally, unless they click a link in the first email, gmail should consider anything subsequent to be spam anyway. They have no idea whether consent happened somewhere else or not. The unsubscribe links must work without even opening the email, according to gmail rules.
  - zephen 6mo ago
    As a gmail user who may or may not have had to enter an email address to do something on the web, and who gets annoyed by spam, let me describe my decision points (anecdote is not the plural of data, of course, but here I am) when it comes to "unsubscribe" vs marking something "spam." If your email reminds me (upfront!) how and when and why I specifically gave you (and not some other third party) my email address, and promises that you are advertising this newsletter one time, and it is opt-in, and you keep your promise, I am highly unlikely to mark it spam. Now, this presupposes that it was really me who gave you my email address. I have a fairly generic email address because I got on gmail early. There are many variants of it, but sometimes people forget to add the trailing numbers or letters, so I get misdirected email all the time. If the misdirected email is personal, I usually respond letting them know of the issue. If the misdirected email shows a clear understanding that I might not have been the one who really signed up then I give them a pass. If the misdirected email blithely assumes that I am the one who signed up, then I blithely assume that its senders are too fucking stupid to use the internet and it goes straight into the spam bucket. (And this is usually an easy call because they use the name of the person with the similar email address, which is not my name. My email address is firstinitiallastname@gmail.com and there are many different first names that start with the same initial.) Any failure on any of those other points starts to increase the likelihood of it being marked spam, and... > The unsubscribe links must work without even opening the email, according to gmail rules. So here's where I'm a hard-ass and maybe even worse than google's rules. If I see the RFC8058 unsubscribe link, it is too late. I only notice that link after I've decided to mark your email as "spam" and google asks if I'm sure, or if I merely want to unsubscribe. Why did I decide to mark your email as spam? One possible reason is that I read through it, decided that the sender legitimately had my email address and was acting honorably, and then clicked the unsubscribe link embedded in the email. When I do that, one of two things happens. Either I get some form of "thank you, you've been unsubscribed" or nothing happens because the sender assumes that I am OK with them executing javascript on my computer. This is a privilege I jealously guard and only reluctantly offer to as few websites as possible. Even if I previously gave you my email address, that did not come with an open invitation to use my computing resources for your own purposes.

kolektiv 6mo ago

> over the last decade Be aware that under various regulations, you're potentially already at risk of accusation in terms of unwarranted data retention. If you haven't got a good reason to have kept those email addresses, something like the GDPR might not interpret that favourably. While the GDPR doesn't specify actual time limits, they are expected to be proportionate. Financial records are generally 7 years unless otherwise legally required, so for a decade, you would be saying that these email addresses are more critical/valid than that. That may be the case, I don't know your business, but be careful if you don't want some very awkward questions asked. Just the hassle of having to deal with complaints you might get (and various regulators would take notice of 1 million instances) is likely to be more than it's worth for most. The suggestion downthread to send a very clear "we still have your address, would you like to opt in to this newsletter, otherwise we'll remove it" is not a bad one, but even then, some people will object to you still having it at all.

EGreg 6mo ago
People originally opted in and provided it expecting to get a newsletter on how to use the app. We never seemed to have the bandwidth to create a good enough one, so we never sent it. We kept improving the app until it became very good and still never sent the emails. But retained the addresses, so that one day we could tell people the app has improved, to give it a try, include animated GIFs of it in action and gradually educate them on ways to use it. For that I get chastizement on HN, figures. Yes, there is a clearly valid business purpose under GDPR for retaining the email addresses of users who want to learn how to use your app better and opted in. If you plan to send a newsletter out. Other than those voluntarily entered emails (which aren’t even linked to the user), we haven’t retained literally any information about our users, despite having millions of users download and use the app over a decade. Which is far beyond pretty much any social app I know. But almost no one actually cares.
- kolektiv 6mo ago
  > For that I get chastizement on HN, figures. I really wasn't trying to chastize, honestly it was intended as a friendly dollop of advice as someone who's dealt with this kind of thing. But since you have replied, I would say: > Yes, there is a clearly valid business purpose under GDPR for retaining the email addresses of users who want to learn how to use your app better and opted in. Relevance is likely to be seen as contextual. Someone wishing to do something a full decade ago is not likely to be seen as sufficient evidence to justify contacting them now in case they still wish to. That's a big chunk of the point about time-limiting data retention - the data gets less relevant and more problematic over time. I get that you're not trying to colour outside the lines here, but from the perspective of your users, and anyone looking at their potential complaints from a regulatory perspective, the window in which they reasonably consented to contact has closed (and probably some time ago). The regulations are there, ostensibly, to protect consumers. They will be interpreted in that light. I can almost guarantee that if you sent an email to your downloader base 10 years after they last heard from you, being ignored will be the best case, and the worst will be reports to local regulators.

Macha 6mo ago

My reaction would be to report spam with a vengeance

bandrami 6mo ago

Oh my God don't do that

QuercusMax 6mo ago

What percentage of those million still use your app? What percentage of those million remember the existence of your app? Unless you're sure both of those are VERY high, you would be an absolute imbecile to spam them.