This weekend, I went shopping at random stores around the city where I live. For you see, my wife purchased a book of coupons and we decided to use some of them. We flipped through the book looking for ones we might like and found a few to stores we had never been to, nor would ever go to had we not purchased the coupon book.
We went down to a specialty coffee store and browsed around. We found a couple of coffees we might like to try. Good thing we had a discount because they cost roughly double what we normally buy at Trader Joe’s.
When we went to pay, the staff hadn’t seen the coupons before and then look them up. After confirming it was okay to use their own coupons they informed us we needed to supply an email address.
Normally, both me and my wife decline to provide an email address at any retailer. I don’t want your email notices, I just want the merchandise I can currently trying to acquire. But, this retailer informed us that “we needed to supply an email address in order to use the coupon.” My wife begrudgingly handed it over.
Why should I have to do that? Why do I need to give out an email address at all?
I just got an email from Home Depot today telling me my email address was leaked during their most recent hack this past September. Doing the math in my head, this means that I can expect more spam and probably a bunch of customized phishing attempts (i.e., some phisher impersonating Home Depot telling me that I have to take a particular action in response to the breach) going forward.
And this irks me about giving up my email address. Not only do I not want to give it out because I don’t want to sign up for advertisements from the retailer, I don’t entirely trust them to keep it secure, either. I feel like handing it over is akin to opening my front door and hoping flies and other insects stay outdoors.
I didn’t think fast enough at the time, but next time I have to hand over an email address maybe I should do one of the following:
- Claim I don’t have an email address
- Give a fake email address to domain that doesn’t resolve
- Give an email address to a known spam trap
- Give an email address that says “do_not_email_me_I_am_only_giving_this_because_I_have_to@example.com”
This probably wouldn’t solve any problems or change anyone’s behavior, but it would certainly make me feel better.