I do this with gmail, when I register an account I'll use firstname.lastname+domain.name@gmail.com.

Whoever with more than two brain cells would notice and strip the suffix out, but they usually don't bother with a database leak.