When a website asks for your email address, there's a mismatch between what they say they need it for and what they actually want it for.
What they say: "We need your email to send you a confirmation," "to verify your account," "to send you your receipt."
What they want: a persistent identifier they can use to track you across sessions, build a profile, send you marketing, and sell your data to brokers who will do the same.
This isn't cynical speculation. It's the documented business model of most consumer internet properties. Advertising and email marketing are revenue streams. Your email address is the input. Understanding this framing makes the calculus simple: you should give your real email address only when the service can't function without it.
What websites actually do with your email
The first use is identification. Email addresses are unique, relatively stable, and cross-platform. Even if you clear your cookies, delete your browser history, and use a VPN, a website that has your email address can re-identify you the moment you log in. This is why login prompts appear so quickly and persistently on content sites — the login isn't for your convenience; it's for theirs.
The second use is retargeting. If a retailer has your email address, they can upload it to Facebook's "Custom Audiences" feature and serve you ads on Facebook even if you've never connected your Facebook account to that retailer. Google offers the same capability with its "Customer Match" product. Your email address, combined with their advertising platforms, allows companies to follow you across the internet far more reliably than cookies ever could.
The third use is resale and enrichment. As described in the data broker article, your email address is a commodity. It flows between companies according to whatever privacy policy you agreed to (or didn't read).
Interrogating the "necessity" claim
Before giving any website your real email, it's worth asking: what actually breaks if they don't have it?
Transactional email (receipts, shipping notifications, password resets): Genuinely needs to reach you. If you're making a purchase you'll need to track, your real address is appropriate. If the purchase is a digital download delivered instantly, a disposable address works fine — the confirmation arrives before the inbox expires.
Account creation: Depends on whether you'll use the account again. A forum you'll visit twice doesn't warrant a real address. A service with billing, history, or settings you'll need to access deserves one.
Newsletter subscription: Almost never requires your real address unless the newsletter is something you actually want to receive for years. Signing up for a newsletter to get a 10% discount code and then ignoring it — a pattern that describes most newsletter sign-ups — is exactly what disposable addresses are for.
"Required" verification emails: Some sites send a verification email before letting you access content. This is barely a verification; it's a mechanism to collect your address. A disposable address that can receive the verification email defeats this gate perfectly.
Free trial access: Free trials convert better when the company can send follow-up emails during the trial period and afterward. That's the business model. The trial still works with a disposable address. You just won't get the upsell sequence.
The long tail of leakage
Here's the practical argument for treating your real email as a limited resource: every site that has it is an attack vector, a spam source, and a potential data broker customer. Each individual risk is small. The cumulative effect of giving your address to hundreds of websites over years is a primary inbox flooded with mail you didn't want, at risk from credential stuffing on every platform those sites ever get breached.
Think of your primary email address like your home address. You give it to banks, employers, and close contacts. You don't write it on public walls or hand it to strangers at the door. The internet, however, has been designed to make the equivalent of handing your address to strangers seem like a normal, frictionless activity. It isn't.
The counterarguments
"I'll just unsubscribe later." This works for legitimate companies and fails for the rest, as discussed in the spam guide. More importantly, unsubscribing doesn't undo the data sale that already happened.
"I don't care about privacy, I have nothing to hide." The "nothing to hide" framing conflates privacy with secrecy. Privacy is about autonomy — about controlling the narrative of your own life, choosing what you share with whom, and not having your personal data used against your interests without your knowledge. You don't have to have secrets to want control.
"Big companies already have all my data anyway." This is a counsel of despair rather than an argument. Yes, large data brokers have substantial profiles on most adults. That's an argument for protecting the data they don't yet have, not for giving up entirely.
"Disposable addresses feel like too much friction." This was true five years ago when using a disposable email meant opening a separate tab, navigating to a service, copying an address, and switching back. Modern disposable email services make this a single visit and a single click. The address is ready before you've finished filling out the rest of the form.
The habit change
The goal isn't to make every website interaction a political act. It's to establish a default: primary address for things that genuinely need it; disposable address for everything else. This default costs nothing to maintain. It's a one-time choice applied consistently.
After a few months of operating this way, your primary inbox becomes noticeably quieter. The email that does arrive is the email you wanted. That's not privacy as abstraction — it's privacy as a practical improvement to daily life.
Change your default. Try Temp Mail Now — one click, no signup, inbox expires in 6 hours.