Every alert email we send includes an unsubscribe link at the bottom. It's a genuinely one-click action — no sign-in, no password, no "are you sure" screen with a confusing form.
Requiring a login to unsubscribe is a common dark pattern precisely because it works — friction reduces cancellations, whether or not that's the honest intent behind adding it. We'd rather make leaving as easy as joining. The link itself carries enough information to identify the subscription and stop it, nothing more.
We stop sending alerts immediately. We do keep enough of your record to honor that choice going forward — mainly so a future signup with the same email doesn't accidentally re-add you — details on exactly what's retained and for how long are in our privacy policy.
This is the same instinct behind writing about why the booking interstitial exists instead of leaving it unexplained, or naming exactly what we record and share instead of a vague privacy summary. A feature that's actually easy to use doesn't need to hide behind extra steps to look legitimate.