Comment by dwattttt
Just to make the claim clearer: it can't matter what the authentication mechanism is.
If a Privacy Pass token is needed for access to your email, then redeeming the token tells the service you (the client) can access your email. That's identified you.