[agjmills]

Isn't this the entire point of GDPR in the EU? To prevent corporations and individuals from using your personal data for any purpose other than for the reason your provided it.

Perhaps you should change your strategy? Personally, I use [e-mail] as then I'll know the source, when I find my email address has been sold to a 3rf party

[rutt_fylke]

I use something similar but without the downside of the "+[...]@domain.tld. Some website don't allow email addresses with the "+" and, as mentionned in this thread, the "+..." can be stripped easily.

I use one of my domain name with a catchall address at my email provider. Everytime I have to signup on a website or IRL with an email address, I just use "[e-mail]" or "[e-mail]". I maintain a simple blacklist of all the throw away emails that have been abused over the past 25 years. I have set up a rule on the email server to delete all messages addressed to any of these blacklisted addresses. This is very effective at cutting down spam.

Downside : when you get a real human from a real company on the phone or IRL. Usually, they don't understand why you have "[e-mail]". But it was never a major issue for me.

[hericium]

> I use [e-mail] as then I'll know the source, when I find my email address has been sold to a 3rf party

Why would anyone keep "+website" after obtaining your address for illicit purposes?