Is consent required for Elastic Email on my website?

Yes. Elastic Email scripts embed signup forms and may set persistent cookies, requiring consent under the ePrivacy Directive. Collecting email addresses for marketing also requires a lawful basis under GDPR — typically explicit consent. The script should not load before the visitor has opted in.

What does Elastic Email collect from my website visitors?

Elastic Email form scripts collect visitor email addresses submitted through embedded subscription forms. Scripts load from Elastic Email's servers and may set cookies to track form interactions and prevent duplicate submissions. Collected email addresses are transmitted to the Elastic Email platform for list management.

How does ConsentStack handle Elastic Email consent?

ConsentStack classifies Elastic Email as marketing and blocks its form embed script until the visitor grants marketing consent. Once consent is given, the subscription form loads and can capture email addresses. If consent is denied, the script remains blocked and no form data or cookies are written.

What tracker domains does Elastic Email use?

ConsentStack has catalogued tracker domains for Elastic Email including elasticemail.com. These are the network destinations Elastic Email's scripts contact, which a consent platform blocks until a visitor agrees.

Elastic Email - Email Signup Form Privacy Controls

Back to Vendor Library

Overview

Elastic Email provides email delivery infrastructure alongside a marketing platform with embeddable signup forms. The company is based in Canada and operates data centers in multiple regions, which affects data residency considerations for EU-based operators. Elastic Email is widely used by small businesses and developers who need both transactional email delivery and list-building tools through a single provider.

What This Script Does

Elastic Email signup form scripts load from Elastic Email's servers and render subscription widgets on the host page. The client-side behavior includes:

Form rendering and validation: The script creates and validates the signup form fields client-side, handling email format checks and required field validation before submission. Form assets may load from elasticemail.com subdomains.

Data transmission: On submission, the visitor's email address and any additional fields (name, custom fields) are posted directly to Elastic Email's API. The submitted data is used to create or update a subscriber record in the operator's mailing list.

Cookies: Elastic Email form scripts typically set a short-lived cookie to track submission state and prevent duplicate form submissions within a session. Some configurations may set a cookie to record that a visitor has already subscribed, persisting across sessions to suppress the form from reappearing. Cookie lifespans depend on the widget configuration.

Interaction tracking: Depending on configuration, the script may fire event callbacks on form view, field interaction, and successful submission. These events are reported to Elastic Email for form analytics but are not used to build cross-site behavioral profiles.

Consent & Compliance

GDPR and ePrivacy Directive: Collecting email addresses for marketing constitutes processing of personal data under GDPR. The ePrivacy Directive requires consent before setting non-essential cookies. Because Elastic Email's form scripts may set persistent cookies and transmit personal data to a third-party server, explicit consent is required before the script loads. The lawful basis is consent (Article 6(1)(a)), and the signup form itself must include a clear statement of marketing purpose.

CCPA/CPRA: Email addresses are personal information under CCPA. Transmission to Elastic Email as a service provider is permissible without being classified as a "sale" provided a valid service provider agreement restricts Elastic Email's use of the data to providing the service.

Consent category: marketing. The sole function of Elastic Email's website embed is collecting subscribers for email marketing campaigns.

Should You Block This Without Consent?

Yes.

Elastic Email signup forms transmit personal data (email addresses) to a third-party server and may set persistent tracking cookies. Loading these scripts without prior marketing consent violates GDPR and the ePrivacy Directive. The form embed should remain blocked until the user provides explicit marketing consent.

Is Elastic Email GDPR compliant?

Elastic Email typically loads marketing trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Elastic Email can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Elastic Email, not on Elastic Email itself.

Visit website