Elastic Email

Overview

Elastic Email provides email delivery infrastructure alongside a marketing platform with embeddable signup forms. The company is based in Canada and operates data centers in multiple regions, which affects data residency considerations for EU-based operators. Elastic Email is widely used by small businesses and developers who need both transactional email delivery and list-building tools through a single provider.

What This Script Does

Elastic Email signup form scripts load from Elastic Email's servers and render subscription widgets on the host page. The client-side behavior includes:

Form rendering and validation: The script creates and validates the signup form fields client-side, handling email format checks and required field validation before submission. Form assets may load from elasticemail.com subdomains.

Data transmission: On submission, the visitor's email address and any additional fields (name, custom fields) are posted directly to Elastic Email's API. The submitted data is used to create or update a subscriber record in the operator's mailing list.

Cookies: Elastic Email form scripts typically set a short-lived cookie to track submission state and prevent duplicate form submissions within a session. Some configurations may set a cookie to record that a visitor has already subscribed, persisting across sessions to suppress the form from reappearing. Cookie lifespans depend on the widget configuration.

Interaction tracking: Depending on configuration, the script may fire event callbacks on form view, field interaction, and successful submission. These events are reported to Elastic Email for form analytics but are not used to build cross-site behavioral profiles.

Consent & Compliance

GDPR and ePrivacy Directive: Collecting email addresses for marketing constitutes processing of personal data under GDPR. The ePrivacy Directive requires consent before setting non-essential cookies. Because Elastic Email's form scripts may set persistent cookies and transmit personal data to a third-party server, explicit consent is required before the script loads. The lawful basis is consent (Article 6(1)(a)), and the signup form itself must include a clear statement of marketing purpose.

CCPA/CPRA: Email addresses are personal information under CCPA. Transmission to Elastic Email as a service provider is permissible without being classified as a "sale" provided a valid service provider agreement restricts Elastic Email's use of the data to providing the service.

Consent category: marketing. The sole function of Elastic Email's website embed is collecting subscribers for email marketing campaigns.

Should You Block This Without Consent?

Yes.

Elastic Email signup forms transmit personal data (email addresses) to a third-party server and may set persistent tracking cookies. Loading these scripts without prior marketing consent violates GDPR and the ePrivacy Directive. The form embed should remain blocked until the user provides explicit marketing consent.