Articles about
privacy

Iterable made the email tracking pixel a per-recipient consent value and Braze made its MCP server sign in as the person using it. The same design decision from two ends of the stack, and the history nobody has planned to keep.

Klaviyo published 260 MCP tools with write access in a single sentence, and published nothing about session lifetime or permissions. In the same four days, a regulator, a messaging provider and a standards body all turned the opt-out path into something with an API and an audit trail.

The open-tracking pixel became a consent attribute, an entire CDP moved inside the customer's own Snowflake account, and any messaging channel became a no-code configuration. Three items, one week, and the same underlying move: the platform is where your logic runs, not where your state lives.