POLL: ok, when you're out shopping *in the real world* and you're asked for an email address *in the real world* from a place you're *really buying something*, do you...

EDIT: I intentionally left "I don't give an email" off the list, lol just pick one, it's a poll on social media not an election

  • give them a fake email/one you'll never check (43%, 235 votes)
  • give them an email that'll actually deliver to you (56%, 306 votes)
541 voters. Poll end: 1 mese fa

Questa voce è stata modificata (1 mese fa)
in reply to now it's veronicaexplains.net

OK, I'm gathering from a lot of the comments that "can I get your email" isn't a common thing in a lot of the world.

I live in Minneapolis, a major metropolitan area in the United States, and it's *extremely common* for most in-person businesses to be using a point-of-sale system that requires or heavily suggests using an email or phone number to ID each patron. Many businesses are quite insistent, and I'm not going to be a jerk about it to the cashier, who didn't make that decision.

in reply to now it's veronicaexplains.net

Particularly when I have throwaway emails at the ready, it's quite trivial to give out an email that I can easily delete later on. But a lot of the time, particularly for *in-person* shopping, I actually want/need the receipt, and want/need the coupons that come from the seller.

That's just my experience though as someone who lives in a big city where this tech is essentially omnipresent.

in reply to now it's veronicaexplains.net

do I remember correctly that you use FastMail?

Have a "random number" widget on your phone. Copy random number. Go to FastMail Settings → Aliases. Add new: "user-$n@$domain", with a private label naming the retail vendor.

Takes only a few seconds.

And have a filter that sorts "to:user-*@$domain" into "retail" folder.

Questa voce è stata modificata (1 mese fa)
in reply to now it's veronicaexplains.net

I've been using Sneakemail.com for this purpose for a LONG time. Unfortuantely Sneakemail doesn't allow requesting a custom "user part" of the email address, nor a "pronounceable" option. It's a random alphanumeric string.

I might eventually gather up the contact relationships I need and migrate out of Sneakemail, but it's going to be a big job.

in reply to now it's veronicaexplains.net

The use case you describe is a perfect example for @simplelogin. It can generate an address on-the-fly on first use. That way you get the receipts as you want, and can close the addresses independently if they are getting abused.

And when I give them an address, I often deliberately give them an address which includes the shop name and the word "spam" ... Just to observe the look on their faces trying to comprehend what is just happening.

in reply to now it's veronicaexplains.net

I have a domain I don't use for anything with wildcard email address that goes to one of my real addresses. I grok receipts, etc., but it also helps when I get an email addressed to business@domain.com and it's about crypto investment.

Then I go and throw high profanity loaded messages to their corporate "contact us" link/email address.

in reply to now it's veronicaexplains.net

Comparaison with the local situation

Sensitive content

in reply to now it's veronicaexplains.net

@Veronica Explains
Here in Italy we have fidelity cards (not only from supermarkets) and you can get coupons printed together with your receipt. You may be asked for your email when you request the fidelity card, but not always. Sometimes you only enter your email if you create an account on the store's website.
in reply to now it's veronicaexplains.net

Always a real email but one that is specific to their business.

No physical store has ever leaked my details though. Only tech companies (for a somewhat broad definition of "tech companies" -- I'm including Patreon lol)

Oh and one store I shop at a lot is also my employer so I use my work email there, the IT team can deal with all the crap they send me 😀

Questa voce è stata modificata (1 mese fa)
in reply to now it's veronicaexplains.net

Honestly might be more of a USA-side thing physical stores asking for email addresses routinely.

None of the UK shops I regularly visit in person ask for email, receipts are physically printed unless declined.

The grocery stores don't ask at the till. Might have a leaflet elsewhere to pickup for "loyalty" scheme but they assume people will be prompted to do that with online orders rather than having time to push it in-store.

Esp. since the shift to self-service checkouts.

Questa voce è stata modificata (1 mese fa)
in reply to 🐈‍⬛David Sommerseth

@dazo@infosec.exchange This is exactly the system I was trying to remember and that I want to install on my server! Thank you!

Yeah, I hope it works like DuckDuckGo Email Protection, right? Same principle: I just give a unique email for each place that asks, a real address that I can disable anytime.

If I may share something curious, in Brazil, what we're always asked for is our CPF (our taxpayer/everything government ID number). I'm always trying to avoid disclosing it, for obvious reasons. The second thing they often ask for is our mobile phone number. Some places now even ask about :instaburn: ... they just assume, if you're a living person, you use Instagram and your phone number is actually WhatsApp :picardFacepalm:

CC: @vkc@linuxmom.net @simplelogin@fosstodon.org

in reply to now it's veronicaexplains.net

Here in the UK I had a shop (chain went out of business years ago) refuse to sell me an unlocked mobile phone that I was going to use with my own SIM unless I gave a load details including email address. They claimed it was for "security" reasons.
I went to another store (its still trades to this day) and got the same phone at same price, no data given away.
I found out that the 1st store was getting paid for selling customer data. About tens bucks per customer in USA money.
Questa voce è stata modificata (1 mese fa)
Unknown parent

mastodon - Collegamento all'originale

Paul L

@neil
Do you think it is partly due to the legal frameworks / data protection?

Here I believe the rule is not to collect/retain information that is not required to complete a transaction or other process.

I also assume shops are not strictly allowed to share purchase history with any other stores not in the same chain or partner group.

Although most web advertising / analytics will probably claim grounds of "browsing data collected to improve the website performance / customer experience".

in reply to now it's veronicaexplains.net

@neil it's interesting to see the geographic variation in these things... Here in Europe I never saw people asking for email, stores that want some tracking or coupons will make you get an app or a physical customer card. Back in Brazil stores will want your tax number for tracking and discounts (which most people will be fine giving), and very few people even have or check emails, all commercial communication is through WhatsApp
in reply to now it's veronicaexplains.net

Depends.

A one-time-shopping place : lol, here's my trash-email

A supermarket I buy from every week and would like coupons from : ok, you can have an e-mail I check.

(Also I'm in the European Union, data protection is supposed to be the rule)(Not great though, but better than nothing at all)

Questa voce è stata modificata (1 mese fa)
in reply to now it's veronicaexplains.net

i think this is rarer in the UK but i just give them a valid email (from a small selection depending on"trust").

What's the risk model/concern with giving them an email? i.e. why would you not?

Edit: strike that, I've just seen one of your later comments that implies "spam". Maybe it's a UK/EU thing but I've found stores are pretty good at honouring "Unsubscribe", and I'm fairly certain not selling on "email lists".

Questa voce è stata modificata (1 mese fa)
in reply to now it's veronicaexplains.net

that's fair. I'm probably too trusting/relaxed,

I've got email accounts that are 30 years old, so I suspect a good number are out there, even if I do get very little (unexpected) spam.

My password hygiene is good though, plus 2FA, which at least would mitigate some of that risk. I'm probably more worried about the number of companies who have things like Credit card details (I normally uncheck "save this for next time")

in reply to now it's veronicaexplains.net

I've been asked this twice. One was when I bought a bicycle at a small company and had an option to handle all the guarantee things and servicing in an uncomplicated manner; the other one was some shop that wanted me to join their frequent buyer program that way. Sounded complicated with all that hassle at the counter, so I skipped.
in reply to now it's veronicaexplains.net

Little of column A little of column B for me.

I have email masks I can name/make up on the fly that do go to my real email, but can be set to filter out promotional emails, or just block all content (or let it through later). Plus it helps give me both unique logins and passwords for sites that collect email as an account name.

I'd say between the two options, I'm the first one, but I'm not REALLY in either camp.

in reply to now it's veronicaexplains.net

I've only been asked once in Australia. I was already fed up, so made a face like I was about to burst into tears, & said "I just want to pay & go home", in a confused voice.

I'm not too proud! 😂

If it was it a requirement everywhere, I'd be really pissed off, but I'd have a please send spam here address to give. It's the owners I'm angry with, & they're rarely on the floor.