throwaway4816

The EU has the ePrivacy Directive 2002/58/EC. Article 13 prohibits the use of email addresses for marketing purposes. The Directive establishes the opt-in regime, where unsolicited emails may be sent only with prior agreement of the recipient.

The Internet is the wild wild west, lots of scummy practices (including shadow profiles).

Use a CDN then block every other country. CF has a country code variable in the session data. Other CDNs have something similar.