In EU you would have to opt in since there are actual data protections for consumers (that's if it is abusing user specific data which I have to assume it is)