Unsubscribes

One click, no sign-in, no confirmation step

Every campaign email carries an unsubscribe link. The link holds a signed token identifying the organization, the campaign, the recipient and the address, so clicking it is enough — there is no sign-in, no "are you sure", and no form to fill in.

The signature is what makes that safe. The token cannot be edited to unsubscribe somebody else's address, because any change to it invalidates the signature.

Unsubscribe links do not expire. A link in a two-year-old email still works. An unsubscribe link that has stopped working is not a safety feature — it is a spam complaint waiting to happen, and a complaint costs you far more than an old link does.

What one click writes

A single click updates four things:

RecordChange
The contact's subscriptionMarked unsubscribed, with the time
Your suppression listAn entry for that address, reason unsubscribe
The campaign's recipient rowMarked unsubscribed, so your campaign numbers are right
The contact's do-not-contact stateEmail marked as do-not-contact

The first three happen together as one change, so there is no state where the contact looks unsubscribed but is still mailable, or vice versa. The do-not-contact mirror happens immediately afterwards and separately on purpose: if that step failed, it must not undo the opt-out that already succeeded.

What it stops, and what it does not

Still sent?
Newsletters, announcements, campaignsNo
Invoices, receipts, quotes, contractsYes
Password resets and account mailYes
Appointment and job notificationsYes

An unsubscribe is an opt-out from marketing, not a request to stop doing business. Someone who unsubscribed from your newsletter and then books a job still needs their confirmation. See What stops a send for how that distinction is enforced.

Blog and announcement emails to your followers carry a separate one-click link that deactivates the follower record rather than touching the contact. Same signed-token mechanism, different list — someone can stop following your blog without becoming unmailable for everything else.

Re-subscribing

There is no way to re-subscribe an address from the dashboard, and that is a gap rather than a policy. The suppression entry and the unsubscribed contact both stay as they are, and nothing in the product removes either.

Two consequences worth planning around:

  • Adding an unsubscribed address to a new segment does not re-subscribe it. The contact's existing state is kept, so the send is skipped as unsubscribed. The campaign reports it rather than mailing it.
  • If someone asks to start hearing from you again, that currently needs an operator. The manual and admin_block suppression reasons exist in the system, but there is no screen for adding or removing suppressions yet.

Because an opt-out is effectively permanent today, treat the unsubscribe link as the real thing — which it is. Do not test it with a customer's address, and do not click it in a preview sent to a staff member whose address you still need to mail.

Each contact record carries how consent was captured — a signup form, a checkout, an import, the API, or an admin — along with the time, and the IP and browser when it came from a form.

That is there so "why are we emailing this person?" has a documented answer rather than a guess. An address imported from a spreadsheet is recorded as an import, which is honestly weaker than one that came from a form on your site, and the record says so rather than flattening the two.