Email Exposure Score

Before you submit, see how muchtrust this form deserves

Email risk is about more than spam. How long contact continues, whether you can opt out, and whether the address supports account recovery all affect which address you should provide.

Start the four-part assessment

0–2 points each

Four questions make up your exposure score

The higher the score, the more you should separate this signup from your regular email. Anything involving finances or identity recovery should use an address you can access long term.

Trustworthiness

Can you verify the organizer’s identity?

A clear official site and purpose score 0; an unclear source or missing privacy information scores 2.

Contact duration

How long will the emails continue?

An immediate confirmation only scores 0; ongoing marketing or no clear end date scores 2.

Exit options

Can you easily stop the emails?

A working unsubscribe option scores 0; no unsubscribe link or a manual request scores 2.

Recovery value

Would losing the address cause harm?

Free resources score 0; tickets, refunds, or account recovery score 2—use a long-term address instead.

Understand your result

The score is a starting point; the consequences decide

0–2 points

Low exposure

The source is trusted and contact is brief, so a disposable email can handle a one-time confirmation.

3–5 points

Keep it separate

Use a disposable email first; if the notification period is uncertain, choose a long-term alias.

6–8 points

Submit with caution

Verify the organizer and purpose first. If the data boundaries are unclear, do not submit important identity information.

Two exceptions

Don’t let the total score hide critical risks

Any address used for password resets, payment refunds, certificate reissues, or legal notices must remain accessible. Even with a low overall score, avoid using a short-lived email.

If the form also requests identity documents, payment details, or an unnecessary personal profile, switching email addresses will not remove the risk. First decide whether the data collection is justified.

Compare the boundaries of three address types →