Surprised I have not posted prior about this. Gmail allows one to use username+anything@gmail.com and have it delivered to username@gmail.com. Use it to sign up for web sites or things and filter later. Should this address be compromised, you can create a filter to delete anything sent through just that address.

Keep in mind…

1. Though I would expect pretty good spammers or hackers to remove the +anything. 
2. Some web sites use algorithms that consider these addresses not real.

So your results may vary.