If you think that's bad, I worked at a company that didn't always need your email address. Their customer sites would add their third-party cookie, so if you enter your email on any of their customer sites they could send you a cart abandonment email (I don't think you even had to SUBMIT your email, as it would be sent to the server as soon as it looked like a valid email). Fortunately I quit working for them once they started going down that evil route.