Email privacy guide

How your address leaks, and which kind of email to hand out when.

Every time you type your email address into a form, you're making a small trust decision, usually without thinking about it. Most of those decisions are fine. Some of them quietly cost you years of unwanted mail. This guide is about telling the two apart.

How a signup email ends up on spam lists

Handing over your email rarely stays a one-way, one-time exchange. Here's what typically happens after you sign up for something with your real address:

• The company itself keeps emailing you. Most signup forms are attached to a marketing list by default, and unsubscribe links don't always work as promised, especially from smaller or less scrupulous operators.
• The address gets shared with "partners." Terms of service frequently include broad language allowing your data — including your email — to be shared with affiliated companies, ad networks, or business partners for marketing purposes.
• The company gets breached. Data breaches happen constantly, and email addresses are usually the first field exposed. Once your address is in a breach dump, it circulates indefinitely across the internet's less reputable corners.
• The address gets sold outright to data brokers. Some sites exist specifically to harvest emails and resell them in bulk to marketers, regardless of what their privacy policy claims.

None of this requires anything unusual to happen — it's the ordinary lifecycle of an email address handed to an ordinary website. The address doesn't have to be "hacked" for it to end up on ten mailing lists you never opted into; it just has to be typed into enough forms over enough years.

The real cost of a leaked address

The obvious cost is spam volume — a slow accumulation of newsletters, promotions, and re-engagement emails from companies you interacted with once, years ago. The less obvious cost is that your email address becomes a stable identifier that ties together everything you've ever signed up for. Marketers and data brokers use exactly this kind of cross-referencing to build a profile of you: what services you use, what you're interested in, sometimes what you've purchased. An email address that's been floating around for a decade is worth more to that ecosystem than a fresh one, simply because it has more history attached.

Three tiers of email, and when to use each

You don't need a different strategy for every single form you fill out — you need three tools and a quick judgment call about which one fits.

1. Your real address

Reserve this for people and organizations you have an actual, lasting relationship with: your bank, your employer, close contacts, services you rely on and would want to hear from if something important happened. The bar is "I want this in my inbox indefinitely."

2. An alias

An alias is a secondary address, often through your existing email provider or your own domain, that forwards to your real inbox but can be individually disabled. Use it for services you want to receive mail from but might want to cut off later — a shopping site, a SaaS trial, a newsletter you're mildly interested in. If that specific alias starts getting abused or spammed, you kill just that one, and your real address is never exposed to begin with.

3. Disposable email

Use a disposable address, like the one this site gives you, for anything you expect to interact with exactly once and never again: confirming a download, verifying a forum signup you'll never revisit, checking whether a service's confirmation email even arrives, or testing a form during development. Nothing about a disposable address is meant to last, which is precisely why it's safe to hand out freely — there's no long-term identifier for anyone to attach to you.

A simple rule of thumb

Before typing your email into a form, ask: will I ever need to receive anything at this address again after the next few minutes? If the honest answer is no, a disposable address is the right tool, and using your real one is pure downside — more exposure, more potential spam, zero additional benefit. If the answer is yes, but you're not fully sure you trust the requester long-term, an alias gives you an escape hatch without over-committing. Save your real address for the short list of relationships you're confident you want to keep.

For a step-by-step walkthrough of using a disposable address at signup, see stop spam signups.