I personally switched to the following policy a year or two ago to avoid all this crap: 1) NoScript extension filtering everything except the base domain => no

I personally switched to the following policy a year or two ago to avoid all this crap: 1) NoScript extension filtering everything except the base domain => no third party scripts are allowed except when I explicitly allow them 2) Cookie Whitelist extension to allow cookies only from domains I choose, only when I need => no third party cookies allowed, ever 3) µBlock incase the webpage tries to load iframe ads 4) a unique email address per service (like amazon.[5 random chars]@mydomain.com) so if all else fail and your address gets in the hands of somebody who should not have it, you know where it came from and can expose them