[mbirth]

Get a domain. Then get an email provider that allows unlimited aliases (I'm using German UberSpace).

Then start setting up unique email addresses for each service, e.g. [e-mail] . The "abcd" part should be random for each service so it's impossible to guess your other email addresses.

I also use yearly throwaway addresses, e.g. [e-mail], for when I need an email address without having the means to create a new alias first. (I then change that later.)

Should spam starting to appear, you'll know exactly which service "got hacked" (i.e. sold your email address) and can just disable that alias and create one with different random letters. Also when deleting an account somewhere, just also delete the alias and you won't get any mails about signing up again.

It takes a bit of discipline but it gives you lots of control over your inbox.

[kettleballroll]

I've done the same, but apparently no one ever sells my email. Did your effort ever pay off?

[mbirth]

Yes, various times. Mostly LinkedIn and a few other services that vanished but seemingly sold their userdata. And 2 or 3 times I've got spam before the company announced that they got hacked.

[cube00]

Paid off for me. Very satisfying busting a company selling my address and bringing to their privacy officer's attention as to why I'll never be a customer of theirs again.

[nerdzero]

I've been doing this for years and have had maybe 4 addresses compromised out of a couple hundred.

[malka]

same here. I was expecting a lot more re-selling of my email adress to be honest.