Why we don't ask for your email

If you’ve ever tried to do a second PDF operation on a “free” site and been blocked by an email pop-up, this post is for you.

I want to walk through how that pattern works, why so many sites ship it, what we built Loft to do instead, and what we’re giving up by not asking for your email. The honest answer at the end is “we lose some real things and gain a different real thing,” and you may decide the trade isn’t right for you — that’s fine.

The pop-up shows up because the operator’s business needs your email. On a “free online” site, every conversion is a small bet: will this user pay for upgrade, click an ad, or hand over a join key that can be matched against other databases later. Asking for the email between operations is the friction that converts some fraction of users into one of those outcomes. Nothing about that is illegal or even necessarily wrong. It’s a model. The operator runs real costs and the email is one of the ways those costs come back as revenue.

What I noticed, after watching too many of those pop-ups, is that the user is never told the size of the trade. The pop-up says “to continue, please enter your email.” It doesn’t say “to continue using this $0 tool, please trade me a permanent contact channel worth roughly $X to my marketing partner over the next two years.” Both sentences are accurate. Only one of them lets the user think clearly about the deal.

So when we built Loft we made a different choice. There is no signup form anywhere in the site. I grepped my own pages while writing this post to be sure — zero registration fields, zero email-required gates on any operation, no newsletter signup anywhere. The only place an email is collected at all is Stripe Checkout on the sponsor page, and only if you choose to support the site financially. Stripe handles the form; the email goes to them and to our receipt records.

The mechanism for this is the architectural choice the rest of the site is built around. Files stay in the browser tab, so there’s no server-side storage to associate you with. Your pinned tools and preferences live in the browser’s own IndexedDB, keyed to your device. Nothing on our side needs an identity for you, so we don’t ask for one.

I should be honest about what we lose.

Cross-device sync doesn’t exist. Pin a tool on your laptop and it isn’t automatically pinned on your phone. There’s no “log in to see my history” — if you process a file, close the tab, and want to re-process it later, you start from the file again. No collaborative features; nothing to share a link to on our side because there’s nothing on our side.

For some users — particularly anyone who genuinely switches between five devices and wants their tool list to follow them — the no-account model is straightforwardly worse than a service with sync. I’d rather acknowledge that up front than oversell.

What we get back is a different shape of relationship with the user. We have no record of who you are because there’s nothing on our side that records it. The privacy-policy page can be one paragraph, and almost is. We don’t have a marketing list to email you, so we never will. If you clear your browser data, you erase everything we ever knew about you, and we don’t get to keep a copy.

A common pushback I get: I’ve handed my email to hundreds of sites already, what difference does one more make? Two answers. First, the marginal addition still compounds — each site is another breach risk, another channel, another row in someone’s data-broker graph. Second, the case for getting picky is strongest exactly where Loft sits: utility tools you’ll use once or twice, not platforms you’ll live in. A streaming service has a real reason to know who you are. A PDF compressor doesn’t.

This morning, while writing this paragraph, I tried to use a competitor’s PDF compressor as a comparison check and got the email gate on the second file. That kept happening to me until I built this site. Maybe it doesn’t keep happening to you. If it doesn’t, the no-signup model is mostly invisible value — nothing changes about how you use the tools. If it does, it’s the entire point.

I don’t have a strong opinion on whether the choice I made is right for everyone. For users who want sync, who collaborate with teams, who’d actually open a newsletter, the email-gated competitors are shipping things we’re not. For users who keep clicking through pop-ups to use a tool they wanted, I think the no-signup model is the better default. You can decide which side you’re on.

---

If you want the technical detail on what we do collect — page view, tool slug, duration, file size bucket, no file content — that’s in pillar §9.