A compliant footer is short: who you are, where you physically are, why this person is getting the message, and a one-click way out. Everything else is optional. The footer mistakes that cost you inbox placement are almost never "too little design" — they are a missing unsubscribe path, an unsubscribe link that takes four clicks, or a footer rendered as a single image that filters cannot read.
The legal minimum, by regime
You are usually subject to more than one of these at once, because the rules follow the recipient, not the sender.
| Regime | Applies to | Footer must contain |
|---|---|---|
| CAN-SPAM (US) | Commercial email to US recipients | A valid physical postal address, a clear opt-out mechanism, honest From/Subject, and opt-out honoured within 10 business days |
| GDPR / ePrivacy (EU/UK) | Marketing to EU/UK recipients | Identity of the sender (legal entity), a way to withdraw consent as easily as it was given, and a route to your privacy information |
| CASL (Canada) | Commercial email to Canadian recipients | Sender identity and mailing address, plus an unsubscribe mechanism that stays functional for at least 60 days after the send |
Three practical notes. The postal address can be a registered office or a mailbox you legally own — it does not have to be where your laptop is. "Reply to this email to opt out" is a weak opt-out mechanism and is not enough on its own once you are sending at any scale. And transactional mail (receipts, password resets, shipping notices) is treated differently from marketing mail: it still needs honest headers and sender identity, but it does not need a marketing unsubscribe link. Mixing a promotion into a receipt is what turns a transactional email into a marketing email.
The unsubscribe header matters more than the footer link
Since Google and Yahoo's February 2024 bulk sender requirements, senders above roughly 5,000 messages a day to those providers are expected to support one-click unsubscribe and to process the request within two days. That is not the link in your footer — it is a pair of headers, defined in RFC 8058:
List-Unsubscribe: <https://example.com/u/0a1b2c3d>, <mailto:unsubscribe@example.com> List-Unsubscribe-Post: List-Unsubscribe=One-Click
When both headers are present, Gmail and Outlook can render their own unsubscribe control next to your From name. That control is the single best thing you can give an unhappy recipient, because the alternative they reach for is the spam button — and complaint rate is a metric Google states publicly: keep it below 0.3%, and ideally below 0.1%.
The HTTPS endpoint must accept a POST and act on it without asking the recipient to log in, confirm, or pick preferences. If your one-click URL lands on a preference centre that requires a second click, you have technically failed the requirement.
What else earns its place
- A one-line reason for receiving it. "You're getting this because you downloaded the SPF checklist in March." It reduces complaints more than any design change.
- A plain-text unsubscribe link in the footer as well as the header, for clients that do not render the header control.
- A preference centre link *in addition to* unsubscribe, never instead of it. A preference centre that lowers frequency keeps addresses you would otherwise lose, but burying the real opt-out behind it is the single most common compliance failure.
- A real reply address. Mail from
noreply@collects complaints that would otherwise have been replies.
What quietly hurts deliverability
- An image-only footer. If the legal text lives inside a PNG, it is invisible to recipients who block images (Outlook desktop blocks remote images by default) and invisible to filters looking for a compliant footer. Footers must be live text.
- 6px light-grey text on white. Filters have flagged hidden or near-invisible text for twenty years. Small is fine; invisible is a signal.
- Link shorteners.
bit.lyand friends in a footer put a shared, abused domain into your message. Use your own domain, or a tracking subdomain you control with its own CNAME. - An unsubscribe link on a different domain from the From domain. It looks like a hijacked template. Keep unsubscribe, tracking and landing pages on your own registrable domain.
- Unsubscribe that 404s or needs a login. Mailbox providers click these. A broken opt-out converts into complaints within one send.
- Ten social icons and a "forward to a friend" link. More outbound links to more domains, each with its own reputation, for almost no measured return.
- Different footers per template. Pick one footer block, store it once, and change it in one place. Drift is where the missing address appears.
A footer you can copy
MailPilot — Example Ltd, 221B Example Street, Example City, EX1 2AB You're receiving this because you signed up at example.com on 3 March. Unsubscribe: https://example.com/u/0a1b2c3d · Email preferences: https://example.com/prefs
Three lines, live text, your own domain, one unambiguous exit. Pair it with the two List-Unsubscribe headers above and you have satisfied both the law and the providers.
Do not treat the footer as a deliverability fix
A perfect footer will not rescue a domain with failing authentication or a list full of stale addresses. It is a floor, not a lever: get it right once, template it, and spend the remaining effort on authentication, list hygiene and sending reputation.
MailPilot checks the parts of that floor you cannot see from the sent folder — whether SPF, DKIM and DMARC actually pass on the message as delivered, and where real messages from your mailbox land per provider, so you can tell a footer problem from a reputation problem.
Ready to reach the inbox every time?
Automated email warmup across real peer mailboxes. Live inbox placement monitoring. Free 7-day trial - no credit card required.
Start free trial