GitLab.com only newsletter opt-in at signup

Description

Due to laws in various countries, it is not possible to automatically opt everyone into marketing communications when they sign up to GitLab.com.

Proposal

1. Add a checkbox to the signup process to receive updates and marketing communication from GitLab
2. This checkbox only appears on gitlab.com
3. The checkbox should un-checked by default
4. When submitting the event that is picked up by our marketing platform, we need to include this piece of metadata in the payload

Links / references

https://gitlab.com/gitlab-com/marketing/issues/931 https://gitlab.com/gitlab-com/support-forum/issues/1616#note_25419026

changed the description

cc @jjcordz @mitchellwright

changed the description

In addition to the two countries listed above others that require explicit consent (no pre-checked box) are:

• Australia
• Japan
• All countries in the European Union:
  • Austria
  • Belgium
  • Bulgaria
  • Croatia
  • Cyprus
  • Czech Republic
  • Denmark
  • Estonia
  • Finland
  • France
  • Germany
  • Greece
  • Hungary
  • Ireland
  • Italy
  • Latvia
  • Lithuania
  • Luxembourg
  • Malta
  • Netherlands
  • Poland
  • Portugal
  • Romania
  • Slovakia
  • Slovenia
  • Spain
  • Sweden
  • United Kingdom

To comply with International laws, the subscriber IP address, date & time and acquisition source are required to be saved cause if ever questioned we (GitLab) are required to provide proof of consent.

mentioned in issue gitlab-com/marketing#895

mentioned in issue gitlab-com/support-forum#1616

Quickly add a checkbox on the register tab page.

added UX ready and removed UX labels

@mydigitalself My apologies for changing direction on this, but would it be possible to have the check box unchecked for everyone?

cc/ @mitchellwright

changed the description

@jjcordz no problem, i've updated the description to reflect that.

changed milestone to %9.5

Hey @mydigitalself it seems this one didn't make it into the last release. Is there any reason why? Not having this opens us up to some very costly law suits due to being non-compliant with a number of international laws.

Fines for violating a country's anti-spam laws can be in the millions of dollars depending on volume of violations, not to mention legal costs of defending against a "notice of violation". And even more importantly, respecting our customers, users and their communication preferences should be a priority for us.

@mitchellwright we got completely overloaded last release and missed a number of deliverables. We will ensure this gets done in 9.5 cc @DouweM it's not assigned, I thought we were assigning all Deliverable items

assigned to @mkozono

changed milestone to %10.0

changed milestone to %9.5

subscriber IP address, date & time and acquisition source are required to be saved

Since we hardcode lead_source to GitLab.com in https://gitlab.com/gitlab-com/marketo-tools/blob/master/lib/user.rb#L17, would that count as a saved acquisition source? (Otherwise I plan to hardcode the same thing in the EE codebase, which is not a big deal, but redundant).

Similar question for date & time. Since marketo-tools sets signUpDate: Date.today, is that sufficient, or should I save a timestamp in GitLab as well, and pass that through marketo-tools?

@jjcordz @DouweM @rspeicher