When I sign up somewhere, I often use

my.email.address+service@gmail.com

And then occasionally spam comes into my mailbox “hi person, you singed up for spam service” send to my.email.address+spotify@gmail.com

and well, now I know who sold it