I've tried it, a dozen times, in two European countries with, on paper, strong data protection laws. Every single time, after anemic back-and-forth, the national data protection agency basically told me "they say it's fine and you opted in, nothing we can do".