Use your real address whenever money or a guarantee is attached to the order, and a throwaway address when the shop only wants an address to let you past a form. That is the whole rule, and it works because the two cases need opposite things from an inbox. A purchase needs an address you will still be reading in two years, when a laptop dies inside its warranty or a return goes wrong. A discount code needs an address you never think about again. Serving both with one address is what leaves people either drowning in marketing mail or unable to prove they bought something.
The harder part is that shops rarely tell you which situation you are in. A clothing site asking for an address before it shows you the welcome code is using it as a turnstile. The same site asking for one at checkout is creating the only record you will have of the transaction. Both forms look identical.
What a shop does with your address after you hand it over
Three separate things happen to an address you give a retailer, and they have very different lifespans.
The first is transactional mail: the order confirmation, the dispatch notice, the tracking link, the refund notification. This is the part you want. It is also the part that doubles as your receipt, because for most online purchases there is no paper one. The order confirmation email is the document that ties your name, the price you paid, and the date together.
The second is marketing. Almost every checkout feeds the address into a mailing list, sometimes with a tick box you can decline, sometimes on the grounds that an existing customer can be mailed about similar products without asking. That mail continues long after the purchase, and the volume tends to rise over time as the shop adds abandoned-cart reminders, loyalty programmes and seasonal campaigns.
The third is matching. An email address is the most durable identifier most people have. It is stable across devices, browsers, cleared cookies and new phones, which makes it the key advertising and analytics systems use to recognise the same person in two different places. Retailers and ad platforms commonly hash the address rather than pass the raw text around, but the same address hashes to the same value everywhere, so the match still works. The practical consequence is that the address you use at a shoe shop is how an unrelated site can know you are the person who looked at shoes.
On top of all three sits the risk of a breach. Commerce databases are a standard target, and when one spills it leaks addresses alongside names, order histories and partial delivery details — exactly the material that makes a later phishing attempt convincing.
The question that actually decides it
Ignore how much you trust the shop. Ask instead: if something goes wrong with this, will I need to prove it happened?
Use your real address when the answer is yes
That covers more than people expect:
- Anything with a warranty or guarantee. Warranty claims are usually authenticated by order number plus the email address the order was placed with. If you cannot receive mail at that address, you are relying on the retailer's goodwill to find the order another way.
- Anything returnable. Return portals typically email the label, the authorisation number and the confirmation that the item arrived back. That last message is what you need if the refund does not appear.
- Anything you might dispute. A card chargeback goes faster when you can forward the order confirmation and the delivery notification.
- Subscriptions and anything recurring. You need the renewal notice, and often need to reply from that address to cancel.
- Deliveries to your home. Couriers send the delivery window and the failed-delivery notice. Missing those costs you the parcel.
- Anything expensive enough that losing it would annoy you. Set a threshold once, then stop deliberating per purchase.
A throwaway is fine when the answer is no
Equally, a long list of forms ask for an address and then never need to reach you again:
- The newsletter signup that releases a first-order discount code.
- Back-in-stock and price-drop alerts, which you either act on within days or do not.
- Gated content — a sizing guide, a catalogue PDF, a quote calculator.
- One-off contact with a marketplace seller about a local pickup you will pay for in cash.
- Competition entries and giveaways, which exist largely to build lists.
In all of these the address is a turnstile. A disposable inbox passes the turnstile, receives the code, and takes the consequences — including whatever that list is sold into later — instead of your real mailbox. If you have not used one before, how MailboxTemp works is a two-minute read: you get an address immediately, mail arrives in the page, and the inbox disappears on its own.
The mistake to avoid: a receipt you cannot reach
The one genuinely bad outcome is using a disposable address for a real purchase and then needing the order confirmation. Disposable inboxes are built to expire; that is the feature. Once an inbox is gone, the mail in it is gone, and no service can retrieve it for you — can you recover a temp mail address explains why in more detail, and the answer does not change for shopping.
If you have already done it, save the message out of the temporary inbox while you still have it: download the confirmation as a PDF, or screenshot it with the order number, the amount and the date visible. Do it immediately, not later.
And if you want the privacy of a separate address but the purchase is real, a disposable inbox is the wrong tool and an alias is the right one. An alias forwards to your actual mailbox indefinitely, so the shop never learns your real address but you keep receiving the mail — email aliases versus disposable email sets out which services do what and where each one stops being useful.
The middle option most people skip
There is a third choice that solves this more cleanly than either extreme: one ordinary, permanent mailbox used only for buying things.
It is a real address, so the receipts arrive and stay. It is not your main address, so the marketing mail that follows lands somewhere you only open on purpose, and the matching described above ties your shopping to an identity that is not the one your bank and your employer use. And when a retailer is breached, the address exposed leads nowhere sensitive.
Two things make it work in practice. Set your main mailbox as its recovery address, so you cannot lock yourself out of your own purchase history. And search it rather than reading it — the point of the account is that order confirmations from five years of shopping are all in one searchable place, not that you keep it tidy.
People often reach for Gmail's plus-addressing instead, writing name+shop@gmail.com. It is useful for filtering and it does reveal who leaked an address, but it is not privacy: the tag sits in plain sight and anything automated can strip it back to your real address, and a fair number of checkout forms reject the + character outright.
Worth doing at checkout regardless of which address you use
The address is one decision on that page, and the others matter nearly as much:
- Read the tick boxes before submitting. Consent to marketing is frequently pre-selected, and sometimes split into two boxes — one for the shop, one for unnamed "partners". The second is the one that generates mail you cannot trace.
- Use guest checkout when it is offered. An account you did not need is a stored copy of your details waiting for the next breach.
- Leave the phone number blank if the field allows it. It is usually there for marketing, not delivery, and it is a far worse thing to leak than an email address.
- Decline to store the card. Re-typing it costs less than being in the next card-data incident.
If your shopping address does start attracting real volumes of junk, that is a signal rather than bad luck: it usually means a specific list has been sold or breached. Why am I suddenly getting so much spam works through the likely causes, and the fastest remedy is often to retire that address and start a fresh one.
The short version
- Real address: warranties, returns, anything disputable, subscriptions, home deliveries.
- Throwaway address: discount codes, stock alerts, gated downloads, giveaways, one-off messages.
- Never a throwaway for a purchase you may need to prove — and if you did, save the confirmation out of the inbox now.
- For a real purchase you want kept private, use an alias, not a disposable inbox.
- Best general setup: one permanent mailbox used only for buying things, with your main address as its recovery option.
- Untick the marketing boxes, use guest checkout, and skip the phone field.