Sachys: huh... and Im known for joking about tinfoil hats, guess the joke died.
It's not really tinfoil hat when, companies like twitter, have even admitted to it. It's impossible to maintain a website and to make sure illegal things aren't talking place without the ability to, for example, check what communications happen across your site when issues arise, etc. Those tools are usually provided to staff or a limited amount of staff for legit purposes.
Sachys: Just remember theres a clear line between spam and harrasment in regards to what you're stating. The only official and legal channel for any of these companies is the email you signed up with / current logon email (you know - out there in the free world).
It's neither spam nor harassment if it is done in a official compacity and for legit purposes related to your job. GOG designs the features here, and designs how they work and function. They didn't have to offer such a feature at all.
Only way I can see this becoming a legal matter is if GOG didn't inform you, but that is a simple matter of updating their privacy policy to say that they make check communications or contact you via personal message for official business. Like I said it's not really uncommon.
Sachys: So... lets just let this thread die, yeah?
Sure. It was a simply question for Chandra, not something that needed to be debated yea?