[flutas]

> you can sign up to each service with a unique email address, e.g. <microsoft>@<your-domain.com>, which makes it easy to see if any services ever sold your address.

Pro tip on this, use gibberish if you want a true canary. I know it's tempting to use microsoft@ or ms@ or msft@ etc, but companies are getting smarter about selling emails and filter those out.

[LinuxBender]

Anecdotally backing this up, I did the less obfuscated address with Tractor Supply and they flagged my account as fraud and nullified a gift card that a company gave me. I tried working with their customer support but they were openly joking with one another on the calls treating me as a scammer.

[Toutouxc]

That’s exactly why I’m doing it. Most people don’t need a canary, they just want to be left the fk alone.

[9991]

Problem solved!