If they clicked through to the art gallery website (from maps&#x2F;search) and the art gallery was running an ad&#x2F;tracker network that already knew the user&#x27;s email from elsewhere, they could put two and two together.