An opt-in is the moment a person says yes to receiving your marketing. They tick a box, submit a form that clearly says they will get emails, or click a confirmation link. From that moment you may send them newsletters, launches and offers. Before it, you may not.

It concerns every seller with an email list, a contact form or a checkout. The way you collect the opt-in decides whether your list is legal, whether your emails reach the inbox, and whether the people on it actually want to hear from you.

What is an opt-in?

An opt-in is an affirmative action by which a person consents to receive commercial messages from you. The key word is affirmative. A pre-ticked box is not an opt-in. A line hidden in the terms of service is not an opt-in. A customer who bought once has not opted in to your newsletter by default, though in many countries you may email them about similar products under a separate rule called soft opt-in.

There are two mechanisms. With single opt-in, the person submits the form and is subscribed immediately. With double opt-in, the person submits the form, receives an email with a confirmation link, and is only subscribed after clicking it. Double opt-in proves that the address is real and belongs to the person who typed it.

The opposite action is the opt-out, when a subscriber withdraws consent, usually by clicking unsubscribe. Every marketing email must offer it. Related terms you will meet: consent record (the stored proof of when, where and how someone opted in), soft opt-in (the exception that lets you email existing customers about similar products), and transactional email (order confirmations and receipts, which need no marketing opt-in).

Why it matters

Legal exposure is the obvious reason. Under GDPR in the European Union and the UK, sending marketing to someone without valid consent can be fined, and complaints to a data authority are easy to file. CAN-SPAM in the United States is more permissive on the first send but strict on the unsubscribe. Canada's CASL requires consent before the first email. Wherever your subscribers live, their law applies to you.

The practical reason is deliverability. Gmail, Outlook and Apple Mail watch how recipients react to your emails. Addresses that never asked to hear from you mark you as spam. A complaint rate above 0.1% to 0.3% pushes your whole domain toward the spam folder, including emails to people who did want them.

The numbers make the case. A store with 5,000 subscribers collected with a clear opt-in sees a 38% open rate and a 0.05% complaint rate. The same store adds 3,000 addresses scraped from an event list without consent. The complaint rate rises to 0.4%, Gmail starts filtering the domain, and the open rate on the original 5,000 drops to 22%. The 3,000 extra addresses cost the store 800 opens per email from people who actually wanted it.

How it works

  • Design the form. Email field plus, optionally, a first name. Under it, a sentence that states what the person will receive: "You will get our weekly newsletter with new products and offers. Unsubscribe anytime." For a lead magnet, say that the guide comes by email and that further emails will follow.
  • Choose the checkbox rule. If the form's only purpose is to subscribe, the submit button is the consent and no checkbox is needed. If the form also does something else, such as a checkout or a contest, add an unticked checkbox for marketing.
  • Pick single or double. Double opt-in for markets where it is expected (Germany, Austria, Switzerland) or when list quality matters more than size. Single opt-in when the lead magnet must be delivered instantly and your form has good spam protection.
  • Send the confirmation or welcome immediately. With double opt-in, the confirmation email arrives within a minute with one button. With single opt-in, the welcome email arrives within a minute and repeats what the person signed up for.
  • Store the proof. Timestamp, source (which form, which page), the exact wording shown, the IP address if your tool records it. Your email platform usually does this automatically.
  • Honor the scope. Someone who opted in to "restock alerts for the linen apron" did not opt in to a daily promotional email. Match your sends to what was promised.

Benchmarks and examples

Double opt-in loses 20% to 35% of signups at the confirmation step, mostly typos and people who lost interest. In exchange, lists built with double opt-in show open rates 5 to 10 points higher and bounce rates under 0.5%. A first-purchase checkbox at checkout, unticked, is accepted by 25% to 45% of buyers depending on the wording.

A candle maker in Berlin uses double opt-in on a "10% off your first order" form. 1,000 people submit, 720 confirm. Her open rate is 47% and she has never had a spam complaint.

A skincare brand in Texas uses single opt-in on the same kind of form. 1,000 people submit, 1,000 are subscribed, 60 are typos or fake and bounce. Her open rate is 36%. Both approaches are legal in their markets and both work, with different trade-offs.

A course creator adds an unticked "send me weekly lessons" checkbox to the checkout of a $40 ebook. 41% of buyers tick it. The other 59% get only their receipt and download link, plus emails about similar products under the soft opt-in rule, each with an unsubscribe link.

Common mistakes

  • Pre-ticked boxes. Invalid under GDPR and a frequent cause of complaints. The person must tick it themselves.
  • Bundled consent. "I accept the terms and agree to receive marketing" in one checkbox. Consent must be separate from anything required to complete the purchase.
  • Vague promises. "Subscribe for updates" does not tell people what they will get or how often. Vague expectations lead to spam complaints later.
  • No proof. If a subscriber or an authority asks when and how a person consented and you cannot answer, you are exposed even if the consent was real.
  • Treating every customer as a subscriber. Importing your whole order history into the newsletter list without a checkbox at checkout is the most common way small stores break the rules.

Best practices

  • Say exactly what you will send. Content, frequency and how to stop. "One email a week, new pieces and studio news, unsubscribe in one click."
  • Make the value visible at the form. The opt-in rate depends on the offer. A form next to a lead magnet converts 3% to 5% of visitors; a bare "newsletter" form converts under 1%.
  • Add an unticked marketing checkbox to your checkout. It is the cheapest source of high-quality subscribers, because buyers who tick it have already trusted you with money.
  • Use double opt-in when in doubt. If your audience is in the EU and you cannot decide, double opt-in is the safer default and produces a cleaner list.
  • Send the first email within a minute. The opt-in is the moment of maximum interest. A welcome that arrives a day later gets half the opens.
  • Keep the consent wording in your records. When you change a form, save the old version. The proof must match what the subscriber actually saw.
  • Re-permission old lists. If you have addresses of unknown origin, send one email asking people to confirm they want to stay, then remove everyone who does not click.

In Roctify

Forms in Roctify, available with email marketing from the Creator plan, collect subscribers on your link-in-bio page and your storefront and record when and where each contact joined. The welcome email goes out from the same tool, so the promised code or file is delivered while the interest is fresh.

Because customers and contacts live in the shared catalog, you can tell subscribers apart from buyers who never opted in, and send marketing only to the first group. Every marketing email includes an unsubscribe link, and a contact who opts out is excluded from future campaigns without any manual step.

FAQ

Yes. GDPR requires consent that is freely given, specific, informed and unambiguous, and that you can prove it. A form with clear wording and an unticked box meets that. Double opt-in is not required by the regulation itself, but it is the expected standard in Germany and Austria because of case law there, and it makes proof easier everywhere.

Can I email customers who bought but did not tick the newsletter box?

In the EU and UK, the soft opt-in rule lets you email existing customers about your own similar products, as long as you offered a way to refuse at the point of purchase and every email has an unsubscribe link. In the US, CAN-SPAM allows it too. A customer who bought a mug may get an email about new mugs. They should not get a general newsletter unless they opted in.

What should I do with a list I bought or inherited?

Do not send marketing to it as is. Send a single re-permission email explaining who you are and asking recipients to click to subscribe. Those who click are opted in with fresh proof. Delete the rest. Expect only 5% to 15% to confirm, which tells you how little of that list was worth having.