just witnessed the @simplelogin / #passmail feature from #protonpass protecting my email address ๐
I had ordered a case for my Pixel 8a in February from some random online shop. I used an on-the-fly generated passmail email address for this shop.
Now I noticed an email in my inbox that was 100% spam (someone asking for money with some stupid flavour text)
checking the proton pass app, I can see that the passmail-address was already targeted by other spam mail prior (which was correctly identified as spam).
the protonpass-app creates "contacts" that are attached to this email address (see the screenshot ๐ค)
time to shut down the one-time address that I had used for that shop.
my main address was never leaked ๐๐๐ฝ
never use your real email address when buying from random shops online.
I have seen enough code in order to imagine HOW BAD AND DEPRECATED their backends probably are ๐คฃ