Guides

Ordinary email to another provider may be readable by that provider.

A newsletter signup can spread beyond the publisher through partners, brokers, or a breach.

Career moves can be sensitive.

Association with a cause should not automatically expose the address used for banking or family mail.

A public address is easy for attackers to scrape and target with password-reset messages.

The same email address is a convenient key for matching records across businesses and data brokers.

When every company gets the same address, it is hard to know where unwanted mail began.

A leaked address can keep drawing scams for years if it is also your permanent inbox identity.

A store needs a way to send a receipt; it does not need the address you rely on for your most important accounts.

Reusing one address everywhere lets separate companies and breach datasets join your accounts.

Invisible tracking stays normalized when readers cannot see it.

A newsletter link can carry identifiers that follow your click into a website.

The moment you open a message can become another behavioral signal for automated targeting.

Marketers can use email images to infer the type of device you use, adding detail to a customer profile.

Loading an image from a sender-controlled server can reveal your network address and approximate location.

A tiny invisible image can tell a marketer that you opened a message and when you did it.

A provider cannot casually hand over readable stored contents it does not possess in readable form.

Attachments often contain statements, IDs, and documents more revealing than the email text.

An outside sender may use ordinary email, but that does not mean the copy in your long-term mailbox should remain readable to your provider.

Private correspondence should not require every sender to become a cryptography expert.