hmm perhaps use a privacy preserving email service? also buy your tickets using a 'private' browser that doesn't leak cookie data