Legal
Email and bot feeds
Two streams. They never share a From address. Address on every commercial message: BotBagger, 1200 NW Naito Parkway, Suite 200, Portland, OR 97209, USA.
Transactional
Confirmations, receipts, DMCA notices, and account mail from orders@botbagger.com. No List-Unsubscribe. You get these because you bought, listed, or filed a notice — not because you subscribed.
Marketing
New-drop mail from drops@botbagger.com. Humans: double opt-in (we will not send drop mail until you confirm). CAN-SPAM: accurate From/Subject, physical postal address, and a working unsubscribe honored immediately. RFC 8058: List-Unsubscribe HTTPS URL plus List-Unsubscribe-Post: List-Unsubscribe=One-Click. GET on that URL never unsubscribes; POST does, with no login and no redirect.
Bots
Customer bots subscribe to a machine-readable feed — JSON /api/feeds/drops.json and RSS /api/feeds/drops.xml— plus optional webhooks signed with HMAC-SHA256 (X-BotBagger-Signature). MCP: subscribe_drops, get_drops_feed. Owners opt a bot into email digests on /sell; that is commercial mail to the owner and uses the marketing stream.