A recipient who no longer wants every message you send has two ways out: stop everything, or ask for less. A preference center is where they choose the second. It cannot stand in place of the first.
What is it allowed to replace?
Nothing. It sits alongside the control that stops everything.
The CAN-SPAM compliance guide from the FTC, the US consumer-protection regulator, allows the menu and attaches the condition in the same sentence:
You may create a menu to allow a recipient to opt out of certain types of messages, but you must include the option to stop all marketing messages from you.
A page offering monthly instead of weekly, and product news only, and no way out at all is not a preference center with a gap. It is a non-compliant opt-out path.
Article 21(3) of Regulation (EU) 2016/679 reaches the same place without a balancing test to apply:
Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
A granular preference is not an objection, so it cannot stand in for one.
What must it not require?
A login, a fee, or a reason.
The same FTC guide sets the outer limit on friction: no fee, no personal information beyond an email address, and no step past one reply or one web page.
You can’t charge a fee, require the recipient to give you any personally identifying information beyond an email address, or make the recipient take any step other than sending a reply email or visiting a single page on an Internet website as a condition for honoring an opt-out request.
Three common designs fail that. A preference center behind account authentication asks for more than visiting a page. One that asks why you are leaving before it saves the change adds a step. One that serves only existing customers leaves everyone else with no path at all.
What passes is a page reachable from a signed link in the message. The link identifies the recipient, so nobody has to prove who they are. The change saves on the click rather than after a survey.
What should it offer?
Three axes. One of them stops everything.
- Which streams. Product announcements, the newsletter, the offers, each on its own.
- How often. A frequency choice turns a volume complaint into a setting.
- Stop everything. Prominent, not buried under the granular options.
Google's email sender guidelines place a per-list menu beside one-click unsubscribe rather than in place of it:
Let recipients review the individual mailing lists they’re subscribed to. Let them unsubscribe from lists individually, or all lists at once.
Leave out a channel switcher that moves someone from email to SMS without a fresh opt-in. Permission is channel-specific: an email opt-in is not permission to text. What GDPR requires and the TCPA each say so for their own regime.
How does this fit with a suppression list?
They are separate records. A preference is what the recipient asked for. A suppression is a delivery fact such as a hard bounce.
On Bird, a stated preference lives on the Preferences surface. A suppression lives on the suppression list. Unsubscribe links describes what an opt-out does: marketing sends to that address are refused, transactional sends still go through, and the record shows who opted out and when. An opt-out can also cover all messages rather than marketing only, which blocks transactional mail too. Categories covers why the category on the send is what makes any of this take effect.
Recording an opt-in is not the mirror image of recording an opt-out. The opt-in carries the moment the recipient consented. It takes effect only if that moment is later than the opt-out it reverses. So write the choice and its timestamp, not a flag.
Does it reduce unsubscribes?
It converts some full opt-outs into partial ones.
A recipient who wanted less of one stream can say so instead of leaving. The page does not change the reason they wanted to leave. What is unsubscribe rate covers reading the number, including why driving it to zero is not the goal.
In short
It is an alternative to leaving, not a replacement for it.
The FTC permits a menu of choices only if one of them stops all marketing messages.
A stop-everything control is required on both sides of the Atlantic.
CAN-SPAM requires it. Article 21(3) of the GDPR ends processing for direct marketing on the recipient's objection alone.
It must work without a login.
The FTC limit on friction rules out authentication, a fee, and any step beyond one reply or one web page.
Preferences and suppressions are different records.
One is what the recipient asked for. The other is a delivery fact such as a hard bounce.