I guess this is what I do for email addresses. I own my own domain, and use a unique address for each login and form, so if one leaks the address to spammers, I know which one it came from.