Spam mail from scammers based on browsing activity but where is the leak?

I figured out a while back that Google Duo/Meet listens to phone conversations off app if it has mic permissions but this new leak has me a little perplexed.

The other night I logged in to an old AOL email which I mainly just use for companies that confuse the terms "promotional" and "important" and decided to check the spam folder.

I was surprised to find a lot of spam based on recent browsing activity, a particular peice of furniture …

browsing leak mail privacy scammers spam