TempPrivacy
TempPrivacy
Most people think of an email address as a contact detail — a way for a service to send them things. That is what it looks like from the outside. Underneath, it does something considerably more useful to the companies collecting it: it works as a stable, unique, cross-site identifier, and in the advertising industry it has quietly become one of the most valuable pieces of data you can hand over.
This guide explains the actual mechanism. Not to alarm you — the mechanism is not sinister so much as it is industrial — but because understanding it makes it obvious why compartmentalising your address is worth the small amount of effort it costs.
To link your activity across different websites, a tracking system needs something about you that is the same everywhere. Cookies were the traditional answer, but cookies are a poor identifier: they are per-browser, they get cleared, they do not survive a switch from your laptop to your phone, and browsers have spent the last several years actively restricting them.
An email address has none of those weaknesses. It is:
That last point is the important one. Blocking cookies, using a tracker blocker, or browsing in private mode does nothing about an identifier you typed into a form by hand.
When email-based tracking is described publicly, it usually comes with the reassurance that addresses are hashed — run through a one-way function like SHA-256 — so the raw address is never shared. This is true, and it is much less protective than it sounds.
Hashing protects a secret. An email address is not a secret; it is drawn from a small, guessable space. Anyone holding a list of a few hundred million common addresses can hash the whole list once and then match any incoming hash instantly. Because the same address always produces the same hash, a hashed address works exactly as well as a plaintext one for the purpose of joining records between companies — which is the entire point.
Hashing an email address makes it harder to read at a glance. It does not make it anonymous, and it does not stop it from linking your records across companies. Treat "we only share hashed emails" as a statement about format, not about privacy.
The everyday version looks like this. You buy a pair of running shoes from an online retailer and give them your address at checkout. That retailer works with an advertising platform and shares a hashed version of your address so it can target you later. Separately, a news site you read asks for your email for its newsletter, and it works with the same advertising platform.
The platform now holds the same hash from two unrelated companies. It can conclude, with high confidence, that the person reading that news site is the person who bought those shoes. Repeat this across the dozens of services that hold your address, and a single identifier stitches together a profile spanning your purchases, reading habits, subscriptions, and interests — assembled from companies that never had a direct relationship with each other.
This is sold under names like "identity resolution" or "identity graphs," and it is a mature, well-funded part of the advertising industry. It is also why you occasionally see an advert on one site that seems to know about something you did on a completely different one.
Beyond advertising platforms, there is a separate industry of data brokers whose product is compiled profiles of individuals. Email addresses are a primary key in those databases. Brokers acquire addresses from companies that sell or rent their customer lists, from public records, from apps with permissive terms, and from breaches.
The practical consequence for you is that giving your address to one company frequently means giving it to many. Privacy policies often permit sharing with "partners" or "affiliates" in language broad enough to cover this, and you agreed to it when you signed up — which is technically fair and practically meaningless, since nobody reads it.
The final piece is data breaches. When a service you signed up for years ago is compromised, the leaked data almost always includes email addresses, often with passwords, and frequently with names, physical addresses, or purchase history attached. That data does not expire. It circulates indefinitely.
If you have used the same address everywhere for ten years, it is realistic to assume it appears in multiple breach datasets already. You can check yours against known breaches on Have I Been Pwned, a free and well-regarded service run by a security researcher. Most people are surprised by the number.
This is the strongest argument for compartmentalising. A breach at a site where you used a throwaway address exposes a throwaway address. A breach at a site where you used your primary address adds another permanent entry to the record connecting that address to you.
The goal is not to hide your email address from everyone — that is neither possible nor useful. It is to stop using one address for everything, so that no single identifier accumulates your entire history.
The middle tier does most of the work, and it is the one most people skip. Disposables are the right tool for genuinely one-time interactions; aliases are the right tool for the much larger category of things you want to keep receiving but do not want correlated.
None of this makes you anonymous, and it is worth being honest about that. Sites still see your IP address and can fingerprint your browser. Paying with a card ties a purchase to your name regardless of the address you used. Compartmentalising your email raises the cost of correlating your activity — it does not reduce it to zero.
What it does achieve is preventing one string of text from serving as the join key for your entire online life. That is a meaningful improvement, and it costs about thirty seconds per sign-up.