Off-Facebook activity
In my profile, they managed to obtain a `PURCHASE` event from Macy's -- for an <i>in-person purchase at a physical store</i>. Macy's has my email address and certainly linked it to my credit card number, but this is nonetheless seriously creepy.<p>I just tried to change my email address on Facebook and discovered that they canonicalize plus and dot variations in gmail.com addresses, and thus claim that the new email address is already associated with an account. Ended up having to create a completely new email alias on my own domain.