A disposable address is often taken for a tool of anonymity. It is not one. It solves one specific, narrowly drawn problem very well — and a whole set of neighbouring problems not at all. Know the difference and you use it correctly; miss it and you are relying on it in the wrong place.
What it actually achieves
In the data trade an email address is not a way of contacting you but a key. It is identical across providers, it rarely changes, and it turns up again at every sign-up. That is precisely why records from different sources can be merged with it: same key, therefore same person.
An address you use exactly once cuts that connection. The record created at that one provider can no longer be joined to the rest. That is the whole purpose, and it is a considerable one.
What carries on regardless
Your IP address. The provider you sign up with sees it either way — the address is in the connection, not in the form. It identifies the network operator and the rough region, and in a household or office every device shares the same one.
Your browser's characteristics. Screen size, time zone, language, installed fonts, graphics quirks: together these make an identifier that is remarkably distinctive across many users. It arises without cookies and without signing in.
Everything you type in yourself. Name, address, phone number, payment details. With an order that gets delivered, this is the point at which the disposable address loses all effect — the record contains your home address, and that works as a key at least as well as an email address.
The payment. A card number or a payment-service account connects the transaction with your name at the bank. That is not a shortcoming of the tool but a necessary property of paying for things.
The connection to whatever else you are doing. Sign in to a service in one tab and fill in a form with a disposable address in the next, and you have undone the separation inside the same browser — through referrers, shared identifiers and embedded components.
And the address itself?
One point belongs to the complete picture: with most disposable services the mailbox is reachable without a password. The address is the key. Anyone who guesses or knows it sees the contents.
That is not an oversight but the condition for doing without an account. It does have a practical consequence: a short, obvious address can be hit by a stranger. Choose test or your first name and you should expect the message to arrive not only with you.
From which follows the one setting you actually control: take a long, random address whenever it matters at all.
What it is the right tool for
- A discount code in exchange for an address, redeemed once.
- A file download behind a form.
- A forum or a service you want to try out once.
- A test of your own application where a real confirmation email is needed.
- Any sign-up where the provider needs the address only once anyway.
What it is not the right tool for
- Accounts you want to keep. If the address no longer exists in a year, the route to resetting the password is gone too. This is the most expensive mistake on the list.
- Anything involving money or identity. Bank, insurer, public authority, employer. There the address is not needed as a way of contacting you but as evidence that somebody stays reachable.
- Protection from observation. That takes other tools, and none of them is an email address.
- Confidential content. See above: the mailbox stands open.
What works alongside it
The disposable address is one component, not a substitute. It is sensibly complemented by things acting at other points: a plus address or an alias for services you want to keep; separate browser profiles, so the separation is not undone in the same window; and an understanding of how addresses get into circulation in the first place.
Whether a short-lived address fits a given case comes down to a single question: will you still need this access in a year? When it makes sense and when it does not is described at greater length elsewhere. Everything else follows from that.